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Linear òptics with photon counting is a prominent candidate for practical quantum computing. The 
protocol by Knill, Laflamme, and Milburn [Nature 409, 46 (2001)] explicitly demonstrates that efficient 
scalable quantum computing with single photons, linear optical elements, and projective measure- 
ments is possible. Subsequently, several improvements on this protocol have started to bridge the gap 
between theoretical scalability and practical implementation. We review the original theory and its 
improvements, and we give a few examples of experimental two-qubit gates. We discuss the use of 
realistic components, the errors they induce in the computation, and how these errors can be corrected. 
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Quantum computing has attracted much attention over 
the last ten to fifteen years, partly because of its promise 
of super-fast factoring and its potential for the effi- 
cient simulation of quantum dynamics. There are many 
different architectures for quantum computers based 
on many different physical systems. These include 
atom- and ion-trap quantum computing, superconduct- 
ing charge and flux qubits, nuclear magnètic resonance, 
spin- and charge-based quantum dots, nuclear spin 
quantum computing, and optical quantum computing 
(for a recent overview see Spiller et al. 2005). All these 
systems have their own advantages in quantum Infor- 
mation processing. However, even though there may 
now be a few front-runners, such as ion-trap and su- 
perconducting quantum computing, no physical imple- 
mentation seems to have a clear edge over others at this 
point. This is an indication that the technology is still in 
its infancy. Quantum computing with linear quantum 
òptics, the subject of this review, has the advantage that 
the smallest unit of quantum information (the photon) 
is potentially free from decoherence: The quantum in- 
formation stored in a photon tends to stay there. The 
downside is that photons do not naturally interact with 
each other, and in order to apply two-qubit quantum 
gates such interactions are essential. 

Therefore, if we are to construct an optical quantum 
computer, one way or another we have to introduce an 
effective interaction between photons. In section II. Dl 
we review the use of so-called large cross-Kerr nonlin- 
earities to induce a single-photon controlled-NOT op- 
eration. However, naturally occurring nonlinearities of 
this sort are many orders of magnitude smaller than 
what is needed for our purposes. An alternative way 
to induce an effective interaction between photons is 
to make projective measurements with photo-detectors. 
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The difficulty with this technique is that such optical 
quantum gates are probabilistic: More often than not, 
the gate fails and destroys the information in the quan- 
tum computation. This can be circumvented by using 
an exponential number of optical modes, but this is by 
definition not scalable (see also section II. D^ . In 2001, 
Knill, Laflamme, and Milburn (KLM 2001) constructed 
a protocol in which probabilistic two-photon gates are 
teleported into a quantum circuit with high probabil- 
ity. Subsequent error correction in the quantum circuit is 
used to bring the error rate down to fault-tolerant levels. 
We describe the KLM protocol in detail in sectionlïïl 

Initially the KLM protocol was designed as a proof 
that linear òptics and projective measurements allow 
for scalable quantum computing in principle. However, 
it subsequently spurred on new experiments in quan- 
tum òptics, demonstrating the operation of high-fidelity 
probabilistic two-photon gates. On the theoretical front, 
several improvements of the protocol were proposed, 
leading to ever smaller overhead cost on the computa- 
tion. A number of these improvements are based on 
cluster-state quantum computing, or the one-way quan- 
tum computer. Recently, a circuit-based model was 
shown to have similar scaling properties as the best- 
known cluster state model. In section ITTTI we describe 
the several improvements to linear optical quantum in- 
formation processing in considerable detail, and in sec- 
tion HV] we describe the issues involved in the use of 
realistic components such as photon detectors, photon 
sources and quantum memòries. Given these realistic 
components, we discuss loss tolerance and general er- 
ror correction for Linear Optical Quantum Computing 
(LOQC) in sectionEl 

We will restrict our discussion to the theory of single- 
photon implementations of quantum information pro- 
cessors, and we assume some familiarity with the bà- 
sic concepts of quantum computing. For an introduc- 
tion to quantum computation and quantum informa- 
tion, see e.g., Nielsen and Chuang (2000). For a re- 
view article on optical quantum information process- 
ing with continuous variables, see Braunstein and Van 
Loock (2005). In section |VT| we conclude with an 
outlook on other promising optical quantum informa- 
tion processing techniques, such as photonic band-gap 
structures, weak cross-Kerr nonlinearities, and hybrid 
matter-photon systems. We start our review with a short 
introduction to linear òptics, N port optical interferome- 
ters and circuits, and we define the different versions of 
the optical qubit. 
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FIG. 1 The beam splitter with transmission amplitude cos 8. 



The quantum-mechanical plane-wave expansion of 
the electromagnètic vector potential is usually expressed 
in terms of the annihilation operators àj(k) and their ad- 
joints, the creation operators: 



d 3 k 



ikx—iw^t 



+ H.c, 



where j indexes the polarisation in the Coulomb gauge 
and is the corresponding polarisation vector. For the 

moment we suppress the polarisation degree of freedom 
and consider general properties of the creation and anni- 
hilation operators. They bear their names because they 
act in a specific way on the Fock states | n) : 



an) 



\fn\n ■ 



and 



Vn + Ï\n + 1), (1) 



where we suppressed the k dependence. It is straight- 
forward to show that n(k) = à^(k)à{k) is the number 
operator h\n) — n\n) for a given mode with momentum 
k. The canonical commutation relations between à and 
flí are given by 



à{k),tf{k') = 6(k-k') 
[à{k),à{k')\ = \à\k),à\k') 



. 



(2) 



In the rest of this review, we denote the information 
about the spatial mode, k, by a subscript, since we will 
not be concerned with the geometrical details of the in- 
terferometers we describe, only how the spatial modes 
are connected. Also, to avoid notational clutter we 
will use operator hats only for non-unitary and non- 
Hermitian operators, as well as cases where omission of 
the hat would lead to confusion. 

An important optical component is the single-mode 
phase shift. It changes the phase of the electromagnètic 
field in a given mode: 



A. Linear quantum òptics 



*out 



= e^a 



(3) 



The bàsic building blocks of linear òptics are beam split- 
ters, half- and quarter-wave plates, phase shifters, etc. 
In this section we will describe these devices mathemat- 
ically and establish the convention that is used through- 
out the rest of the paper. 



with the interaction Hamiltonian H v = 4>à\ n à{ n (here, 
and throughout this review, we use the convention that 
h — 1, and the time dependence is absorbed in (p). 
This Hamiltonian is proportional to the number oper- 
ator, which means that the photon number is conserved. 
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Physically, a phase shifter is a slab of transparent mate- 
rial with an index of refraction that is different from that 
of free space. 

Another important component is the beam splitter (see 
Fig. QJ. Physically, it consists of a semi-reflective mir- 
ror: when light f alls on this mirror, part will be reflected 
and part will be transmitted. The theory of the lossless 
beam splitter is central to LOQC, and was developed by 
Zeilinger (1981) and Fearn and Loudon (1987) . Lossy 
beam splitters were studied by Barnett et al. (1989) . The 
transmission and reflection properties of general dielec- 
tric media were studied by Dowling (1998). Let the two 
incoming modes on either side of the beam splitter be 
denoted by à in and b in , and the outgoing modes by fl out 
and b ou t- When we parameterise the probability ampli- 
tudes of these possibilities as cosí? and sin0, and the 
relative phase as ep, then the beam splitter yields an evo- 
lution in operator form 



»t _ 



= cos a 



+ ie~ i 'Psm8p. , 



P OVLt = ie i(p sm9à 



-cos 6b] 



(4) 



The reflection and transmission coefficients R and T of 
the beam splitter are R = sin 2 9 and T = 1 — R = cos 2 9. 
The relative phase shift ie ±1(p ensures that the transfor- 
mation is unitary. Typically, we choose either ep = or 
(p — n/2. Mathematically the two parameters 9 and ep 
represent the angles of a rotation about two orthogonal 
axes in the Poincaré sphere. The physical beam splitter 
can be described by any choice of 9 and ep, provided the 
correct phase shifts are applied to the outgoing modes. 

In general the Hamiltonian Hgs of the beam splitter 
evolution in Eq. {D is given by 



H BS = 9e iq, alh 



0e- l<p à in b 



(5) 



Since the operator Hgg commutes with the total number 
operator, [Hbs/ n ] = 0, the photon number is conserved 
in the lossless beam splitter, as one would expect. 

The same mathematical description applies to the 
evolution due to a polarisation rotation, physically im- 
plemented by quarter- and half-wave plates. Instead of 
having two different spatial modes flj n and b- m , the two 
incoming modes have different polarisations. We write 
«in — »• à x and £>j n — »• ày for some orthogonal set of coor- 
dinates x and y (i.e., (x|y) = 0). The parameters 9 and ep 
are now angles of rotation: 



it 



W, = cos 9 a-c + ie 

t 



-itp 



ti 



ie t(p sin 9 à' x + cos 9 à 



suava 



y ■ 



(6) 



This evolution has the same Hamiltonian as the beam 
splitter, and it formalises the equivalence between the 
so-called polarisation and dual-rail lògic. These trans- 
formations are suffici ent to im plement any ph otonic 
single-qubit opera ti on I Sim ón and Mukunda 199CJ) . 

The last linear optical element that we highlight here 
is the polarising beam splitter (PBS). In circuit diagrams, 



(a) 



(b) 
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FIG. 2 The polarising beam splitter cut to different polarisa- 
tion bases, (a) The horizontal-vertical basis, (b) The diagonal 
basis. 



it is usually drawn as a box around a regular beam split- 
ter (see Fig- Et)- If the PBS is cut to separate horizontal 
and vertical polarisation, the transformation of the in- 
coming modes (fli n and bj n ) yields the following outgo- 
ing modes ((fl ut and b out ): 



m,H —> à 0Ut/H and à in y —> b 



kn,H -> b nt,H and b 



'in,V 



'out,V 
«out,V 



(7) 



We can also cut the PBS to different polarisation direc- 
tions (e.g., L and R), in which case we make the substi- 
tution H <-> L,V <-> R. Diagrammatically a PBS cut with 
a different polarisation usually has a circle drawn inside 
the box (Fig. Et). 

At this point, we should devote a few words to the 
term "linear òptics". Typically this denotes the set of op- 
tical elements whose interaction Hamiltonian is bilinear 
in the creation and annihilation operators: 



(8) 



An operator of this form commutes with the total num- 
ber operator, and has the property that a simple mode 
transformation of creation operators into a linear combi- 
nation of other creation operators affects only the matrix 
A, but does not introduce terms that are quadratic (or 
higher) in the creation or annihilation operators. How- 
ever, from a field-theoretic point of view, the most gen- 
eral linear Bogoliubov transformation of creation and 
annihilation operators is given by 



(9) 



Clearly, when such a transformation is substituted in 
Eq. JS) this will give rise to terms such as àjà k and àjà k , 
i.e., squeezing. The number of photons is not conserved 
in such a process. For the purpose of this review, we ex- 
clude squeezing as a resource other than as a method for 
generating single photons. 

With the linear optical elements introduced in this sec- 
tion we can build large optical networks. In particular, 
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FIG. 3 Decomposing an N port unitary U(N) into SU(2) 
group elements, i.e., beam splitters and phase shifters. More- 
over, this is an efficient process: the maximum number of 
beam splitters needed is N(N — l)/2. 

we can make computational circuits by using known 
states as the input and measuring the output states. 
Next we will study these optical circuits in more detail. 

B. N port interferometers and optical circuits 

An optical circuit can be thought of as a black box with 
incoming and outgoing modes of the electromagnètic 
field. The black box transforms a state of the incoming 
modes into a different state of the outgoing modes. The 
modes might be mixed by beam splitters, or they may 
pick up a relative phase shift or polarisation rotation. 
These operations all belong to a class of optical compo- 
nents that preserve the photon number, as described in 
the previous section. In addition, the box may include 
measurement devices, the outcomes of which may mod- 
ify optical components on the remaining modes. This 
is called feed-forward detection, and it is an important 
technique that can increase the efficie ncy of a device 
dLapaire et al. 2003tlcTausen et al. 20031) . 

Optical circuits can also be thought of as a general uni- 
tary transformation on N modes, followed by the de- 
tection of a subset of these modes (followed by unitary 
transformation on the remaining modes, detection, and 
so on). The interferometric part of this circuit is also 
called an N port interferometer. N ports yield a uni- 
tary transformation Li of the spatial field modes a k , with 
j,ke{l,...,N}: 

h - £ U jk àj and b\ -> £ U* k à) , (10) 
7=1 7=1 

where the incoming modes of the N port are denoted by 
Uj and the outgoing modes by bj. The explicit form of U 
is given by the repeated application of transformations 
such as given in Eqs. ©, Ü, and JóJ. 

The two-mode operators L+ = ívb, L_ = àb\ and 



Lo = {pa — Wb) /2 form an su(2) Lie àlgebra: 

[£o,£±]=±£± and [L + ,L·] =2L . (11) 

This means that any two-mode interferometer exhibits 
ïi(2) symmetry 1 . In general, an N port interferometer 
can be described by a transformation from the group 
U(N). Reck et al. (1994) demonstrated that the converse 
is also true, i.e., that any unitary transformation of N 
optical modes can be implemented efficiently with an N 
port interferometer . They showed how a general U(N) 
element can be broken down into SLÍ(2) elements, for 
which we have a complete physical representation in 
terms of beam splitters and phase shifters (see Fig. 
The primitive element is a matrix Tpq defined on the 
modes p and q, which corresponds to a beam splitter 
and phase shifts. Implicit in this notation is the iden- 
tity operator on the rest of the optical modes, such that 
Tpq = Tpq ® Irest- We then have 

U(N) ■ T N/N _! ■ ■ ■ T NA = U(N - 1) ® e^ , (12) 

where $ is a single-mode phase. Concatenating this pro- 
cedure leads to a full decomposition oíll(N) into T ele- 
ments, which in turn are part of SLÍ(2). The maximum 
number of beam splitter elements T that are needed is 
N(N — l)/2. This procedure is thus manifestly scalable. 

Subsequently, it was shown by Tòrmà et al. (1995, 
1996) and Jex et al. (1995) how one can construct multi- 
mode Hamiltonians that generate these unitary mode- 
transformations, and a three-path Mach-Zehnder inter- 
ferometer was demonstrated experimentally by Weihs 
et al. (1996). A good introduction to linear optical net- 
works is given by Leonhardt (2003) and a determina- 
tion of effective Hamiltonians is given by Leonhardt and 
Neumaier (2004). For a treatment of optical networks in 
terms of their permanents, see Scheel (2004). Optical cir- 
cuits in a (general) relativistic setting are described by 
Kok and Braunstein (2006). 



C. Qubits in linear òptics 

Formally, a qubit is a quantum system with an SU(2) 
symmetry. We saw above that two optical modes form 
a natural implementation of this symmetry. In gen- 
eral, two modes with fixed total photon number n fur- 
nish natural irreducible representations of this group 
with the dimension of the re presentation given by n + 1 
(Biedenha rn and Louck 198ÏI) . It is at this point not 
specified whether we should use spatial or polarisation 
modes. In linear optical quantum computing, the qubit 



1 Two remarks: Algebras are typically denoted in lower-case, while 
the group itself is denoted in upper-case. Secondly, single-mode 
phase shifts break the "special" symmetry (detLÍ = 1), which is 
why an interferometer is described by U(N), rather than SU(N). 
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of choice is usually taken to be a single photon that has 
the choice of two different modes \0)i = |1) ® |0) = 
|1,0) and |1} L = |0) ® |1) = |0,1). This is called 
a dual-rail qubit. When the two modes represent the 
internal polarisation degree of freedom of the photon 
(|0)l = \H) and \l)i = \V}), we speak of a polari- 
sation qubit. In this review we will reserve the term 
"dual rail" for a qubit with two spatial modes. As we 
showed earlier, these two representations are mathe- 
matically equivalent, and we can physically switch be- 
tween them using polarisation beam splitters. In addi- 
tion, some practical applications (typically involving a 
dephasing channel such as a fibre) may call for so-called 
time-bin qubits, in which the two computational qubit 
vàlues are "early" and "late" arrival times in a detec- 
tor. However, this degree of freedom does not exhibit 
a natural internal SU(2) symmetry: Arbitrary single- 
qubit operations are very difficult to implement. In this 
review we will be concerned mainly with polarisation 
and dual-rail qubits. 

In order to build a quantum computer, we need both 
single-qubit operations as well as two-qubit operations. 
Single-qubit operations are generated by the Pauli op- 
erators cr x , a X j, and o~ z , in the sense that the operator 
exp(í0oy) is a rotation about the /'-axis in the Bloch 
sphere with angle 9. As we have seen, these operations 
can be implemented with phase shifters, beam splitters, 
and polarisation rotations on polarisation and dual-rail 
qubits. In this review, we will use the convention that 
a x , o~y, and <x 2 denote physical processes, while we use 
X, Y, and Z for the corresponding logical operations on 
the qubit. These two representations become inequiva- 
lent when we deal with logical qubits that are encoded 
in múltiple physical qubits. 

Whereas single-qubit operations are straightforward 
in the polarisation and dual-rail representation, the two- 
qubit gates are more problemàtic. Consider, for exam- 
ple, the transformation from a state in the computational 
basis to a maximally entangled Bell state: 

\H,H) ab -> ±=(\H,V) cd + \V,H) cd ) ■ (13) 

This is the type of transformation that requires a two- 
qubit gate. In terms of the creation operators (and ig- 
noring normalisation), the linear optical circuit that is 
supposed to create Bell states out of computational ba- 
sis states is described by a Bogoliubov transformation of 
both creation operators 

«ÍA -> ( E «4+a4) ( L ni+w 

\k=H,V ) \k=H,V ) 

+ 44 + ^4. (14) 

It is immediately clear that the right-hand sides in both 
lines cannot be made the same for any choice of a/ c , [3^, 
Yi, and <5/ c : The top line is a separable expression in the 
creation operators, while the bottom line is an entangled 



expression in the creation operators. Therefore, linear 
òptics alone cannot create maximal polarisation entan- 
glement from single polarised photons in a determinis- 
tic manner ÍKok and Brauns tein 2000a). Entanglement 
that is generated by changing the definition of our sub- 
systems in terms of the global field modes is inequiv- 
alent to the entanglement that is generated by apply- 
ing true two-qubit gates to single-photon polarisation or 
dual-rail qubits. 

Note also that if we choose our representation of 
the qubit differently, we can implement a two-qubit 
transformation. Consider the single-rail qubit encoding 
|0}l = |0) and = That is, the qubit is given 
by the vacuum and the single-photon state. We can 
then implement the following (unnormalised) transfor- 
mation deterministically: 

|1,0) -» |1,0) + |0,1) . (15) 

This is a 50:50 beam splitter transformation. However, 
in this representation the single-qubit operations cannot 
be implemented deterministically with linear optical el- 
ements, since thes e transfor mations do not preserve the 
photon number dParis 20001) . This implies that we can- 
not implement single-qubit and two-qubit gates deter- 
ministically for the same physical representation. For 
linear optical quantum computing, we typically need 
the ability to (dis-) entangle field modes. We therefore 
have to add a non-linear component to our scheme. Two 
possible approaches are the use of Kerr nonlinearities, 
which we briefly review in the next section, and the use 
of projective measurements. In the rest of this review, we 
concentrate mainly on linear optical quantum comput- 
ing with projective measurements, based on the work 
by Knill, Laflamme, and Milburn. 

Finally, in order to make a quantum computer with 
light that can outperform any classical computer, we 
need to understand more about the criteria that make 
quantum computers "quantum". For example, some 
simple schemes in quantum communication require 
only superpositions of quantum states to distinguish 
them from their corresponding classical ones. However, 
we know that this is not sufficient for general computa- 
tional tasks. 

First, we give two definitions. The Pauli group 
P is the set of Pauli operators with coefficients 
{±1, ±í}. For instance, the Pauli group for one qubit 
is {1, ±X, ±Y, ±Z, ±it ± iX, ±zY, ±iZ, } where 1 is the 
identity matrix. The Pauli group for n qubits consists 
of elements that are products of n Pauli operators, in- 
cluding the identity. In addition, we define the Clifford 
group C of transformations that leave the Pauli group in- 
variant. In other words, for any element of the Clifford 
group c and any element of the Pauli group p, we have 

C pc t = p' with p' e P ■ (16) 

Prominent members of the Clifford group are the 
Hadamard transformation, phase transformations, and 
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FIG. 4 Linear optical quantum computing simulation accord- 
ing to Cerf, Adami, and Kwiat. (a) Hadamard gate. (b) CNOT 
gate. The four two-qubit degrees of freedom are carried by 
which-path and polarization information. The broken line in- 
dicates that there is no interaction between the crossing modes. 

the controlled-not (CNOT) 2 Note that the Pauli group is 
a subgroup of the Clifford group. 

The Gottesman-Knill theorem (1999) states that any 
quantum algorithm that initiates in the computational 
basis and employs only transf ormations (gates) from the 
the Clifford group, along with projective measurements 
in the computational basis, can be efficiently simulated 
on a classical computer. This means there is no computa- 
tional advantage in restricting the quantum computer to 
such circuits. A classical machine could simulate them 
efficiently. 

In discrete-variable quantum information processing, 
the Gottesman-Knill theorem provides a valuable tool 
for assessing the classical complexity of a given process. 
(For a precise f ormulation and proof of this theorem, see 
Nielsen and Chuang, page 464). Although the set of 
gates in the Pauli and Clifford groups does not satisfy 
the universality requirements, the addition of a single- 
qubit 7r/8 gate will render the set universal. In single- 
photon quantum information processing we have easy 
access to such single-qubit operations. 



D. Early optical quantum computers and nonlinearities 

Before the work of Knill, Laflamme, and Milburn 
(KLM), quantum information processing with linear òp- 
tics was studied (among other things) in non-scalable 
architectures by Cerf, Adami, and Kwiat (1998, 1999). 
Their linear optical protocol can be considered a simu- 
lation of a quantum computer: n qubits are represented 
by a single photon in 2" different paths. In such an en- 
coding, both single- and two-qubit gates are easily im- 
plemented using (polarisation) beam splitters and phase 
shifters. For example, let a single qubit be given by 
a single photon in two optical modes: |0) jr, = |1,0) 
and |1)l = |0, 1). The Hadamard gate acting on this 



qubit can then be implemented with a 50:50 beam split- 
ter given by Eq. (D with <p = 0, and two — n/2 phase 
shifters (see Fig.Hk): 

|1,0) -» |l,0)+z|0,l> -> |1,0) + |0,1) 

|0,1) -» -í(í|l,0) + |0,l>)^|l,0>-|0,l)out, 

where we suppressed the normalisation. 

The CNOT gate in the Cerf, Adami, and Kwiat proto- 
col is even simpler: suppose that the two optical modes 
in Fig. carry polarisation. The spatial degree of free- 
dom carries the control qubit, and the polarisation car- 
ries the target. If the photon is in the vertical spa- 
tial mode, it will undergo a polarisation rotation; thus 
implementing a CNOT. The control and target qubits 
can be interchanged trivially using a polarisation beam 
splitter. 

Since this protocol requires an exponential number 
of optical modes, this is a simulation rather than a 
fully scalable quantum computer. Other proposals in 
the same spirit include work by Clauser and Dowl- 
ing (1996), Summhammer (1997), Spreeuw (1998), and 
Ekert (1998). Using this simulation, a classical ver- 
sion of Grover's s earch algorithm can be implemented 
jKwiat et al. 20 00). General quantum lògic using po- 
larised photons was studied by Tòrmà and Stenholm 
(1996), Stenholm (1996), and Franson and Pittman 
(1999). 

Prior to KLM, it was widely believed that scalable all- 
optical quantum computing needed a nonlinear compo- 
nent, such as a Kerr medium. These media are typically 
characterised by a refractive index nKerr that has a non- 
linear component: 

n KeiI = n + X {3) E 2 . (17) 

Here, uq is the ordinary refractive index, and E 2 is the 
optical intensity of a probe beam with proportional- 
ity constant ■ A beam traversing through a Kerr 
medium will then experience a phase shift that is pro- 
portional to its intensity. 

A variation on this is the cross-Kerr medium, in which 
the phase shift of a signal beam is proportional to the 
intensity of a second probe beam. In the language of 
quantum òptics, we describe the cross-Kerr medium by 
the Hamiltonian 

fÍKerr = K "s"p ' ( 18 ) 

where ft s and n p are the number operators for the sig- 
nal and probe mode, respectively. Compare Hxerr with 
the argument of the exponential in Eq. J3): Transf orming 
the probe (signal) mode using this Hamiltonian induces 
a phase shift that depends on the number of photons in 
the signal (probe) mode. Indeed, the mode transforma- 
tions of the signal and probe beams are 

à s ^à s e- lTfl P and à p -> àpe"'™ 8 , (19) 



2 See Eq. I25bl for a definition of the CNOT operation. 



with t = kí. When the cross-Kerr medium is placed 
in one arm of a balanced Mach-Zehnder interferometer, 
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(a) a s 



be placed. The mode transformations are 3 




(b) 



FIG. 5 Using cross-Kerr nonlinearities (t) in optical informa- 
tion processing. (a) Single-photon quantum non-demolition 
measurement. The Mach-Zehnder interferometer is balanced, 
such that the presence of a photon in the signal mode directs 
the probe field to the dark output port. (b) Single-photon CZ 
gate. When both photons in modes a and b are vertically po- 
larised, the two-photon state acquires a relative phase. This 
results in an entangling gate that, together with single-photon 
rotations, is sufficient for universal quantum computing. 



a sufficiently strong phase shift t can switch the field 
from one output mode to another (see Fig. For ex- 
ample, if the probe beam is a (weak) optical field, and 
the signal mode may or may not be populated with a 
single photon, then the detection of the output ports of 
the Mach-Zehnder interferometer reveals whether there 
was a photon in the signal beam. Moreover, we ob- 
tain this information zvtíhout destroying the signal photon. 
This is called a qu antum non-demolition measurement 
fonoto et al. 19851) . 

It is not hard to see that we can use this mechanism 
to create an all-optical CZ gate for photonic qubits [for 
the definition of a CZ gate, see Eq. l!25aH . Such a gate 
would give us the capability to build an all-optical quan- 
tum computer. Let's assume that our qubit states are 
single photons with horizontal or vertical polarisation. 
In Fig.[3), we show how the cross-Kerr medium should 



à H b H 
à H b v 



l H u H 
H D V 
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à v b H 
à v b v 
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(20) 



which means that the strength of the Kerr nonlinearity 
should be t = tí in order to implement a CZ gate. It 
is trivial to transform this gate into a CNOT gate. A 
Kerr-based Fredkin gate was developed by Yamamoto 
al. (1988) and Milburn (1989). Architectures based on 
these or similar nonlinear optical gates were studied 
by Chuang and Yamamoto (1995), Howell and Yeazell 
(2000b, 2000c), and d'Ariano et al. (2000). Nonlinear 
interferometers are treated in Sanders and Rice (2000), 
while state transf ormation using Kerr media is the sub- 
ject of Clausen et al. (2002). Recently, Hutchinson and 
Milburn (2004) proposed cross-Kerr nonlinearities to 
create cluster states for quantum computing. We will 
discuss cluster state quantum computing in some detail 
in section lTll.AI 

Unfortunately, even the largest natural cross- 
Kerr nonlinearities are extremely weak (x^ ~ 
10~ 22 m 2 V~ 2 ). Operating in the optical single-photon 
regime with a mode volume of approxi mately 0.1 cm 3 , 
the Kerr phase shift is only r « 10" 18 llKok et al. 2002). 
This makes Kerr-based optical quantum computing 
extremely challenging, if not impossible. Much larger 
cross-Kerr nonlinearities of T ~ 10~ 5 can be obtained 
with electromagnetically-induced transparent materials 
(Schmidtand Imamoglu 1996). However, this value of 
t is still much too small to implement the gates we 
discussed above. Towards the end of this review we 
will indicate how such small-but-not-tiny cross-Kerr 
nonlinearities may be used for quantum computing. 

Turchette et al. (1995) proposed a different method 
of inducing a phase shift when a signal mode s and 
probe mode p of different frequency are both populated 
by a single polarised photon. By sending both modes 
through a cavity containing caesium àtoms, they obtain 
a phase shift that is dependent on the polarisations of 
the input modes: 



\L,L) sp 
\R,L) sp 
\L,R) S p 
\R,R)s P 



e i<ps \R,L}s P 



(21) 



where \L) = \H) + i\V) and \R) = \H) -i\V). Us- 
ing weak coherent pulses, Turchette et al. found <p s = 
17.5° ± 1, 4> p = 12.5° ± 1, and 5 = 16° ± 3. An im- 
provement of this system was proposed by Hofmann et 
al. (2003). These authors showed how a phase shift of n 



3 Note that the phase factors in these operator transformations are 
evaluated for the vacuum state of modes a and b. 
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can be achieved with a single two-level atom in a one- 
sided cavity. The cavity effectively enhances the tiny 
nonlinearity of the atom. The losses in this system are 
negligible. 

In section IVII we will return to systems in which 
(small) phase shifts can be generated using nonlinear 
optical interactions, but the principal subject of this re- 
view is how projective measurements can induce enough 
of a nonlinearity to make linear optical quantum com- 
puting possible. 

II. A NEW PARADIGM FOR OPTICAL QUANTUM 
COMPUTING 

In 2000, Knill, Laflamme, and Milburn proved that it is 
indeed possible to create universal quantum computers 
with linear òptic s, single photons, and photon detection 
(Knill et al. 2001). They constructed an explicit protocol, 
involving off-line resources, quantum teleportation, and 
error correction. In this section, we will describe this 
new paradigm, which has become known as the KLM 
scheme, starting from the description of linear òptics that 
we dev elope d in the previous section. In sections III. Al 

III. BI and III.CI we introduce some elementary probabilis- 
tic gates and their experimental realizations, followed 
by a characterisation of gates in section IÏI.DI and a gen- 
eral discussion on nonlinear unitary gates with projec- 
tive measurements in section IÏLEl We then describe how 
to teleport these gates into an optical computational cir- 
cuit in sections 111 T'l and III.GI and the necessary error 
correction is outlined in section IÏI.HI Recently Myers 
and Laflamme (2005) published a tutorial on the origi- 
nal "KLM theory." 

A. Elementary gates 

Physically, the reason why we cannot construct deter- 
ministic two-qubit gates in the polarisation and dual-rail 
representation, is that photons do not interact with each 
other. The only way in which photons can directly in- 
fluence each other is via the bosonic symmetry relation. 
Indeed, linear optical quantum computing exploits ex- 
actly this property, i.e., the bosonic commutation rela- 
tion [à, =1. To see what we mean by this statement, 
consider two photons in separate spatial modes inter- 
acting on a 50:50 beam splitter. The transformation will 
be 

\i,i) ab = atgt| ) 

= I(ct2_^)| ) cd 

= -J=(|2,0) cd -|0,2) cd ) . (22) 

It is clear (from the second and third line) that the 
bosonic nature of the electromagnètic field gives rise to 




1*2) 



FIG. 6 The conditional phase gate (CZ). This gate uses two 
NS gates to change the relati ve phase of the two qubits: when 
both qubits are in the 1) state, the two photons interfere on the 
50:50 beam splitter (cos 2 (7r/4) = 1/2). The Hong-Ou-Mandel 
effect then ensures that both photons exit the same output 
mode, and the NS gates induce a relative phase n. Upon re- 
combination on the second beam splitter, this phase shows up 
only in the states where both qubits were in the 1 1) state. 

photon bunching: the incoming photons pair off together. 
This is a strictly quantum-mechanical effect, since clas- 
sically the two photons could equally well end up in 
different output modes. In terms of quantum interfer- 
ence, there are two paths leading from the input state 
|1, l)i n to the output state |1, l) ut: Enher both photons 
are transmitted, or both photons are reflected. The rel- 
ative phases of these paths are determined by the beam 
splitter equation J4}: 

|l/l)in ^trans. COS 2 9 |1, l) ut, 

|l/l)in ^refl. " sin 2 9 e^e^l, l) out . (23) 

For a 50:50 beam splitter, we have cos 2 9 = sin 2 9 = 
1 /2, and the two paths cancel exactly, irrespective of the 
value of <p. 

The absence of t he |1, l) r H term is called the Hong-Ou- 
Mandel effect iHong et al. 1987), and it lies at the heart 
of linear optical quantum computing. However, as we 
have argued in section iLCl this is not enough to make 
deterministic linear optical quantum computing possi- 
ble, and we have to turn our attention instead to proba- 
bilistic gates. 

As was shown by Lloyd (1995), almost any two-qubit 
gate is universal for quantum computing (in addition 
to single-qubit gates), but in linear òptics we usually 
consider the controlled-phase gate (CZ, also sometimes 
known as CPHASE or CSign) and the controlled-not 
gate (CNOT). In terms of a truth table, they induce the 
following transformations 



Control 


Target 


CZ 


CNOT 
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|0> 
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0,0) 
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0,1) 
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- 11,1) 




1,0) 



which is identical to 

\qi,qi) ^cz (-l) íl?2 ki,? 2 ) (25a) 

\q\,qi) ^cnot \qi,qi®q\) ■ (25b) 



9 



|0). 



m 






W) 



FIG. 7 The nonlinear sign (NS) gate according to Knill, 
Laflamme and Milburn. The beam splitter transmission am- 
plitudes are 771 = 773 = 1/(4 - 2a/2) and r/ 2 = 3 - 1\JÏ. 
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FIG. 8 The two equivalent versions of the NS gate by Ralph et 
al. (2002b). Only two beam splitters are used, while the other 
resources are identical to the NS gate by Knill. Laflamme and 
Milburn. The success probability of this gate is (3 — y2) /7. 



Here takes the qubit vàlues and 1, while q 2 © c]\ is 
taken modulo 2. 

A CZ gate can be constructed in linear òptics using 
two nonlinear sign (NS) gates. The NS gate acts on the 
three lowest Fock states in the following manner: 

«|0>+j8|l)+r|2) -» a|0)+/3|l)-y|2) . (26) 

Its action on higher number states is irrelevant, as long 
as it does not change the amplitudes of |0), |1), or |2). 
Consider the optical circuit drawn in Fig. [6] and suppose 
the (separable) input state is given by \<pi) ® \<p2) = 
(a|0,l) + /3|l,0))(r|0 7 l) +5|1 7 0)). Subsequently, we 
apply the beam splitter transformation to the first and 
third mode, and find the Hong-Ou-Mandel effect only 
when both modes are populated by one photon. The NS 
gates will then induce a phase shift of tí. Applying a 
second beam splitter operation yields 



IO) 



ay|0,l,0,l)H 
+/3y|l,0,0,i; 



«5)0,1,1,0) 
-0511,0,1,0) . 



(27) 



This is no longer separable in general. In fact, when we 
choose OL—Ç> — y—ò—\j v2, then the output state is 



a maximally entangled state. The overall probability of 

thisCZ gate pcz = P 2 NS - 

It is immediately clear that we cannot make the NS 
gate with a regular phase shifter, because only the state 
|2) picks up a phase. A linear optical phase shifter 
would also induce a factor i (or — i) in the state 1 1 ) . How- 
ever, it is possible to perform the NS-gate probabilistically 
using projective measurements. The fact that two NS 
gates can be used to create a CZ gate was first realized 
by Knill, Laflamme, and Milburn (2001). Their proba- 
bilistic NS gate is a 3-port device, including two ancil- 
lary modes the output of which is measured with perf ect 
photon-number discriminating detectors (see Fig. 0. 
The input states for the ancillae are the vacuum and a 
single-photon, and the gate succeeds when the detec- 
tors D\ and D 2 measure zero and one photons, respec- 
tively. For an arbitrary input state a|0) + /3|1) + y|2), 
this occurs with probability p^s = 1/4- The gen- 
eral upper bound for such gates was found to be 1/2 
(Knill 2003). Without any feed-forward mechanism, the 
success probability of the NS gate cannot exceed 1/4. 
It was shown numerically by Scheel and Lütkenhaus 
(2004) and proved analytically by Eisert (2005) that, in 
general, the NS^ gate defined by 

N N-l 

I>|fc) ^ NSn £ c k \k)-c N \N) (28) 

k=0 k=0 

can be implemented with probability 1/N 2 [see also 
Scheel and Audenaert (2005)]. 

Several simplifications of the NS gate were reported 
shortly after the original KLM proposal. First, a 3-port 
NS gate with only marginally lower success probability 

Vns = ( 3 ~ ^) I 7 was proposed by Ralph et al. (2002b). 
This gate uses only two beam splitters (see Fig. 
Secondly, similar schemes usin g two ancillarv photon s 
ha ve been proposed iZ ou et al. 2 002: Sch eel et al. 2004). 
These protocols have success probabilities of 20% and 
25%, respectively. 

Finally, a scheme equivalent to the one by Ralph et 
al. was proposed by Rudolph and Pan (2001), in which 
the variable beam splitters are replaced with polarisa- 
tion rotations . These might be more convenient to im- 
plement experimentally, since the irrational transmis- 
sion and reflection coefficients of the beam splitters are 
translated into polarisation rotation angles (see Fig. 
For pedagogical purposes, we treat this gate in a lit- 
tle more detail. Assume that the input mode is hori- 
zontally polarised. The polarisation rotation then gives 
àn —* cos criïn + sin crày and the input state transforms 
according to 



|0> 



oc + /3 cos criïn + [3 sin cr ày 



y 

V2 



COS 2 CTflj^ 



sin2o"à| í a| / 



sin 2 crày 1 
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Detecting no photons in the first output port yields 
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oc + /3 cos crà { H + cos z crà^j b v \0) , 



after which we apply the second polarisation rotation: ~~ * cosBa^ + sinBày and ày 
This gives the output state 



smüa H + cosffly. 



oc + j3 cos cr ^cos flpj + sinOày^j + cos 2 cr ^cos 9à\j + smdàÇj ^— sinBà^ + cos 0fly^ |0) . 

After detecting a single vertically polarised photon in the second output port, we have 

l^out} = acos0|O) + /3coscrcos20|l) + ycos 2 cr cos 0(1 -sin 2 30)|2). 



When we choose cr ~ 150.5° and 9 ~ 61. 5°, this 
yields the NS gate with the same probability cos 2 9 = 
(3 — \/2) /7. Finally, in Fig.llQI the circuit of the CZ gate 
by Knill (2002) is shown. The success probability is 2/27. 
This is the most efficient CZ gate known to date. 

Sometimes it might be sufficient to apply destructive 
two-photon gates. For example, a Bell measurement in 



v 0" 



'V" 



teleportation does not need to be non-destructive in or- 
der to sucessfully teleport a photon. In this case, we 
can increase the probability of success of the gate con- 
siderably. A CNOT gate that needs post-selection to 
make sure there is one polarised photon in each output 
mode was proposed by Ralph et al. (2002a). It makes use 
only of beam splitters with reflection coef ficient of 1/3, 
and polarising beam splitters. The success probability 
is 1/9. An identical gate was proposed independently 
by Hofmann and Takeuchi (2002). It was also shown 
that the success probability of an array of n CZ gates of 
this type can be made to operate wit h a prob ability of 
p = (1 /3) n+1 , rather than p = (1 /9) n I Ralp h 20041) . 



1^ 



out; 



\v) 



FIG. 9 The NS gate by Rudolph and Pan. Based on a vacuum 
detection of the first output port, and a single vertically po- 
larised photon on the second output port, the interferometer 
applies an NS gate to the input state. The success probability 
is also (3 — V2) /7, which is close to the optimal value of 1/4. 




FIG. 10 The Knill CZ gate based on two ancilla photons and 
two detected photons. The beam splitter angles are 9 = 54.74 
and <p = 17.63, such that the transmission amplitudes are 
given by cos 9 and cos ep, respectively. 



B. Parity gates and entangled ancillae 

A special optical gate that will become important in sec- 
tion|^is the so-called parity check. It consists of a sin- 
gle polarizing beam splitter, followed by photon detec- 
tion in the complementary basis of one output mode. If 
the input modes are denoted by a and b, and the output 
modes are c and d, then the Bogoliubov transformation 
is given by Eq. 0. For two input qubits in the compu- 
ta tional basis { \H), | V) } this gate induces the following 
transformation: 



\H, H) ab 
\H,V) ab 
\V,H) ab 
\V,V) ab 



\H, H) cd , 

\HV,0) cd , 

\0,HV) cd , 

\v,v) cd , 



(29) 



where \HV, 0) cd denotes a vertically and horizontally 
polarised photon in mode c, and nothing in mode d. 
Making a projective measurement in mode c onto the 
complementary basis ( \H) ± | V) ) / \/2 then yields a par- 
ity check: If we detect a single photon in mode c, we 
know that the input qubits had the same logical value. 
This value is transmitted into the output qubit in mode 
d (up to a cr z transformation depending on the measure- 
ment result). On the other hand, if we detect zero or two 
photons in mode c, the input qubits were not identical. 
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FIG. 11 The CNOT gate by Pittman et al. (2001). The two 
boxes I and II are parity gates in two complementary bases, 
where the detector measures in a complementary basis with 
respect to the polarising beam splitter. The gate makes use of 
a maximally entangled ancillary state + ), which boosts the 
success probability up to one quarter. The target |i/>i)t and 
control \ 4>2)c input states will evolve into an entangled output 
state conditioned on the required detector signature. 



In this case, the state of the output mode is no longer in 
the single-qubit subspace. 

This gate was used by Cerf, Adami, and Kwiat to 
construct small optical quantum circuits (1998). As we 
have seen in section II. Dl however, their approach is 
not scalable since «-qubit circuits involve 2" distinct 
paths. When two parity gates in complementary bases 
are combined with a maximally entangled ancilla state 
|®+) = (\H,H) + W,V))/V2, a CNOT gate with suc- 
cess probability 1 /4 is obtained iPittmann et al. 20011: 
Koas hi et al. 200ll) . The setup is shown in Fig.lïïl 

For a detailed analysis of several probabilistic gates, 
see Lund and Ralph (2002), Gilchrist et al. (2003), and 
Lund et al. (2003). General two-qubit gates based on 
Mach-Zehnder interferometry were proposed by En- 
glert et al. (2001). For a general discussion of entangle- 
ment in quantum information processing see Paris et al. 
(2003). 

All the gates that we have discussed so far are proba- 
bilistic, and indeed all two-qubit gates based on projec- 
tive measurements must be probabilistic. However, it 
is in principle still possible that feed-forward protocols 
can increase the probability to unity. As mentioned be- 
fore, Knill (2003) demonstrated that this is not the case, 
and that instead the highest possible success probabil- 
ity for the NS gate (using feed-forward) is one half . He 
did not show that this bound is tight. Indeed, numeri- 
cal evidence strongly suggests an upper bound of one 
third for infinite feed-forward without entangled an- 
cilla; iScheel et al. 2005). This indicates that the benefit 
of feed-forward might not outweigh its cost. 



C. Experimental demonstrations of gates 

A number of experimental groups have already 
demonstrated all-optical probabilistic quantum gates. 
Early experiments involved a parity check of two 



FIG. 12 Schematic diagram of the experimental setup of the 
three-photon CNOT gate of Pittman et al. (2003). The gate 
starts by preparing the qubits with polarization rotations A,-, 
followed by mixing the ancilla and control qubits on a polar- 
ising beam splitter. The ancilla qubit then is mixing with the 
target qubit on the second polarising beam splitter. The gate 
is implemented upon a three-fold detector coincidence in the 
control, target, and ancilla modes. The polarization rotations 
&l are used to select different polarization bases. 
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FIG. 13 Experimental demonstration of the CNOT gate by 
Pittman et al. (2003). The figure shows the probability of 3- 
fold coincidences as a function of the output qubit analysers 
for all four computational basis states HH, HV, VH, VV in the 
input registers. The error in the gate is approximately 21%. 



polarisation qubits on a polarising beam splitter 
( Pittman et al. 2002 a), and a t wo-photon conditional 
phase switch (Resc h et al. 2 002). A destructive CNOT 
gate was demonstrated by Franson et al. (2003) and 
O'Brien et al. (2003). In this section we will describe the 
experimental demonstration of three CNOT gates. 

First, we consider the three-photon CNOT gate per- 
formed by Pittman, Fitch, Jacobs, and Franson (2003). 
The gate is shown in Fig. ^| and consists of three 
polarisation-encoded single photon qubits and two po- 
larising beam splitters. Two of the polarisation qubits 
represent the control and target qubits and are initially 
in an arbitrary two qubit state |i/>)i n = u\\HH) c t + 
oc 2 \HV} ct + a 3 \VH) ct + ai\VV) ct . The third photon is 
used as an ancilla qubit and is initially prepared in the 
state (|H) + \ V))/\^2. In the Pittman et al. experiment 
the control qubit and the ancillary qubit are created us- 
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ing pulsed parametric down conversion. The target 
qubit is generated by an attenuated làser pulse where 
the pulse is branched off the pump làser. The pulse is 
converted by a frequency doubler to generate entangled 
photon pairs at the same frequency as the photon con- 
stituting the target qubit. The CNOT gate is then im- 
plemented as follows: The action of the polarising beam 
splitters on the control, target and ancilla qubits trans- 
forms them according to 



|i/>)out oc |H) fl U c |^)m + |V) fl Lf c |^) in + V6|í; 



acti 



(30) 



where Líc is the CNOT operator between the control and 
target modes c and í and Üq = (1 <8> cr x ) Uç (1 <8> cr x ). 
The state \£,)act represent terms with zero, two, or three 
photons present in the modes a, c, and í. Depending 
on the polarisation of the measured ancillary photon 
in mode a (and one photon in the control and target 
modes) a CNOT gate up to a local transformation is ap- 
plied to the control and target qubits. For a horizontally 
measured | H) a photon the CNOT gate is exactly imple- 
mented, while for a vertically measured | V) a photon the 
control and target qubits undergo a CNOT gate up to a 
bit flip on the target qubit. In Fig. ^] the truth table is 
shown as a function of the output qubit analysers for all 
four computational basis states HH, HV, VH, VV in the 
input. The success probability for this gate is p = 1/4 
with an error of approximately 21%. 

The second experiment we consider is the CNOT gate by 
O'Brien, P ryde, White, Ralph, and Branning, depicted 
in Fig. 1141 (O'B rien et al. 2003 . which is an implementa- 
tion of the gate proposed by Ralph et al. (2002a). This 
is a post-selected two-photon gate where the two po- 
larised qubits are created in a parametric down conver- 
sion event. The polarisation qubits can be converted 
into which-path qubits via a translation stage depicted 
in Fig. Ill4b ). Both the control and target qubits can be 
prepared in an arbitrary pure superposition of the com- 
putational basis states. 

The gate is most easily understood in terms of dual 
spatial rails, Fig. Ill4h '). The two spatial modes that sup- 
port the target qubit are mixed on a 50:50 beam splitter 
(9i = 7r/4). One of these output modes is mixed with a 
spatial mode of the control qubit on a beam splitter with 
cos 02 = 1/ V3 (that is, a beam splitter with a reflec- 
tivity of 33^%). To balance the probability distribution 
of the CNOT gate, two "dump ports" consisting of an- 
other beam splitter with cos 02 = 1 / a/3 are introduced 
in one of the control and target modes. The gate works 
as follows: If the control qubit is in the state where the 
photon occupies the top mode Cq there is no interaction 
between the control and the target qubit. On the other 
hand, when the control photon is in the lower mode, 
the control and target photons interfere non-classically 
at the central beam splitter with cos 02 — 1/ V&< This 
two-photon quantum interf erence causes a tí phase shif t 
in the upper arm of the target interferometer fo, and as 
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FIG. 14 Schematic diagram of the CNOT gate demonstrated 
by O'Brien et al. (2003). (a) Concept of the two-qubit gate: 
The beam splitter coefficients are 0j = 7r/4 and 9 2 = 
arccos(l/V3). (b) Translation circuit for converting polarisa- 
tion and dual rail qubits. (c) Schematic of the experimental 
setup. Simultaneous detection of a single photon at each of 
the detectors heralds the successful operation of the gate. 
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FIG. 15 Experimental demonstration of the CNOT gate by 
O'Brien et al. (2003) in the logical qubit basis. The data is ob- 
tained by full state tomography of the output states. 



a result, the target photon is switched from one output 
mode to the other. In other words, the target state expe- 
riences a bit flip. The control qubit remains unaffected, 
hence the interpretation of this experiment as a CNOT 
gate. We do not always observe a single photon in each 
of the control and target outputs. However, when a con- 
trol and target photon are detected we know that the 
CNOT operation has been correctly realized. The suc- 
cess probability of such an event is 1 /9. The detection 
of the control and target qubits could in principle be 
achieved by a quantum non-demolition measurement 
(see section RV. A> and would not destroy the Informa- 
tion encoded on the qubits. Experimentally, beam dis- 
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FIG. 16 Schematic diagram of the four-photon CNOT gate by 
Gasparoni et al. (2004). A parametric down conversion source 
is used to create the control and target input qubits in the spa- 
tial modes a\ and ai, as well as a maximally entangled ancilla 
pair in the spatial modes «3 and «4. Polarising filters (Pol) can 
be used to destroy the initial entanglement in a\ and «2 if n eo 
essary. 




FIG. 17 Experimental demonstration of the CNOT gate by 
Gasparoni et al. (2004). Four-fold coincidences for all combi- 
nations of inputs and outputs are shown. 

placers are used to spatially separate the polarisation 
modes, and waveplates are used for the beam-mixing. 

In Fig. 1151 we show the truth table for the CNOT op- 
eration in the coincidence basis. The fidelity of the gate 
is approximately 84% with conditional fringe visibili- 
ties exceeding 90% in non-orthogonal bases. This indi- 
cates that entanglement has been generated in the exper- 
iment: The gate can create entangled output states from 
separable input states. 

The last experiment we consider in some detail is the 
realization of an optical CNOT by Gasparoni, Pan, 
Walther, Rudolph, and Zeilinger (2004). The experiment 
is based on the four-photon lògic gate by Pittman et al. 

(2001) depicted in Fig.ini 

The Gasparoni et al. experiment employs a type- 
II parametric down conversion source operated in a 
"double-pass" arrangement. The down-conversion pro- 
cess naturally produces close to maximally entangled 
photon pairs. This means that, depending on the in- 
put state for the control and target qubits, we may have 
to destroy or decrease any initial polarisation entan- 



glement. This is achieved by letting the photons pass 
through appropriate polarisation filters. After this, any 
two-qubit in put state can be prepared. The gate de- 
picted in Fig.llólworks as follows: The control qubit and 
one half of the Bell state are sent into a polarising beam 
splitter, while the target qubit with the second half of 
the Bell state are sent through a second polarising beam 
splitter. The detection of the ancilla photons heralds the 
operation of the CNOT gate (up to a known bit or sign 
flip on the control and /or target qubit). The probabil- 
ity of success of this gate is 1/4. Due to a lack of de- 
tectors that can resolve the difference between one and 
two photons and the rather low source and detector effi- 
ciencies, four-fold coincidence detection was employed 
to confirm the presence of photons in the output control 
and target ports. In principle, this post-selection can be 
circumvented by using deterministic Bell pair sources 
and detectors that differentiate between one and two in- 
coming photons. 

The CNOT truth table for this experiment, based on 
four-fold coincidences, is shown in Fig. [J"7| This shows 
the operation of the CNOT gate. In addition, Gasparoni 
et al. showed that an equal superposition of H and V 
for the control qubit and H for the target qubit gener- 
ated the maximally entangled state \ HH) + | VV) with a 
fidelity of 81%. This clearly shows that the gate is creat- 
ing entanglement. 

As experiments become more sophisticated, 
more demonstrations of optical gates are re- 
ported. We cannot describe all of them here, but 
other recent experiments in clude the nonlinear 
sign shift iSan aka et al. 200*41) . a non-destructive 
CNOT Jzhao et al. 20051). another CNOT gate 
jFiorentino and Wone 2004), and three-qubit opti - 
cal quantum circuits iTakeuchi 2000b; Takeuchi 2001). 
Four-qubit cluster states, which we will encounter later 
in this review, were demonstrated by Walther et al. 
(2005). 



D. Characterisation of linear òptics gates 

In section IÏI.CI we showed the experimentally realised 
CNOT truth table for three different experimentally re- 
alised gates. However, the construction of the truth table 
is in itself not sufficient to show that a CNOT operation 
has been performed. It is essential to show the quantum 
coherence of the gate. One of the simplest ways to show 
coherence is to apply the gate to an initial separate state 
and show that the gate creates an entangled state (or 
vice versa). For instance, the operation of a CNOT gate 
on the initial state (|H) C — | V) c ) | V)t creates the maxi- 
mally entangled singlet state |H) C | V) t - |V) c |H) f . This 
is sufficient to show the coherence properties of the gate. 
However, showing such coherences does not fully char- 
acterise the gate. To this end, we can perform state to- 
mography. We show an example of this for the CNOT 
gate demonstrated by O'Brien et al. (2003) in Fig. [Ïj5] 
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FIG. 18 Plot of the real part of the density matrix reconstructed 
from quantum process tomography for the input state ( | H) c — 
| V) c ) | V) t • This shows the highly entangled singlet state of the 

form|H)c|V)í-|V) c |H) ( 

The reconstructed density matrix clearly indicates that 
a high-fidelity singlet state has been produced. 

To fully understand the operation of a gate we need 
to create a complete map £ of all the input states to the 
output states. 

d-l 

£(P) = L XmnÀmpÀl, (31) 
m,«=0 

This map represents the process acting on an arbitrary 
input state p, where the operators A m form a basis for 
the operators acting on p. The matrix x describes com- 
pletely the process £. Once this map has been con- 
structed, we know everything about the process, in- 
cluding the purity of the operation and the entangling 
power of the gate. This information can then be used to 
fine-tune the gate operation. Experimentally the map 
is obtained by performing quantum process t omography 
JChuang and Nielsen 1997t iPoyatos et al. 20011) . A set 
of measurements is made on the output of the n-qubit 
quantum gate, given a complete set of input states. The 
input states and measurement projectors each form a ba- 
sis for the set of M-qubit density matrices. For the two- 
qubit CNOT gate {d = 16), we require 256 different set- 
tings of input states and measurement projectors. 

In Fig. we reproduce the reconstructed process 
matrix x for the CNOT gate performed by O'Brien et 
al. (2003). The ideal CNOT can be written as a coher- 
ent sum: Ücnot = 2(l<g>l + l<g)X + Z<g)l-Z<g)X) 
of tensor products of Pauli operators {1, X, Y, Z} acting 
on control and target qubits respectively. The process 
matrix shows the populations/coherences between the 
basis operators making up the gate. The process fidelity 
for this gate exceeds 90% (see also O'Brien et al. 2004). 
For a general review of quantum state tomography with 
an emphasis on quantum information processing, see 




fit--.. 

(b) /V~ 




FIG. 19 Plot of the real (a) and imaginary (b) parts of the re- 
constructed process matrix of the CNOT gate by O'Brien et 
al. (2003). The ideal CNOT can be written as a coherent sum: 
#cnot = |(1 ® 1 + 1 ® X + Z ® 1 - Z ® X); of the tensor 
products of Pauli operators {1, X, Y, Z} acting on control and 
target qubits respectively. 

Lvovsky and Raymer (2005). 

E. General probabilistic nonlinear gates 

The two-qubit gates described above are special cases 
of N ports acting on a set of input states, followed by 
a projective measurement. For quantum computing ap- 
plications, however, we usually want the resulting non- 
linear transformation M to be unitary. This is because 
non-unitary operations will reveal information about 
the qubits in the projective measurement, and hence cor- 
rupts the computation. We can derive a simple criterion 
that the N ports and the p rojective measurements must 
satisfy lLapaire et al. 20031) . 

Suppose the qubits undergoing M span a Hilbert 
space Hq, and the auxiliary qubits span Ha- Further- 
more, let Lí be the unitary transformation of the N port 
in Eq. ilOi and the projector on the auxiliary states 
denoting the measurement outcome labelled by k. P^ 
must be a projector on the Hilbert space with dimension 
dim TÍa for M to be unitary. Given an arbitrary input 
state p of the qubits and a state cr of the auxiliary sys- 
tems, the output state can be written as 

W Tr A [U(p®a)UÏP k ] 
Pout Tr QA [U(p®a)WP k ]- (ó) 
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When we define d(p) = Trg^ \U(p(S) cr)WPi\, we find 
that M is unitary if and only if d(p) is independent of p. 
We can then construct a test operator t = Tr^ (aWPjçU) . 
The induced operation on the qubits in TÍq is then uni- 
tary if and only if T is proportional to the identity, or 



T = Tr A ( aU ] P k U locl « d(p) = d 



(33) 



Given the auxiliary input state cr, the N port transforma- 
tion Lí and the projective measurement Pj-, it is straight- 
forward to check whether this condition holds. The suc- 
cess probability of the gate is given by d. 

In Eq. 11321 , the projective measurement was in fact a 
projection operator (P? = Pj.). However, in general, 
we might want to include generalised measurements, 
commonly known as Positive Operator- Valued Mea- 
sures, or POVMs. These are particularly useful when 
we need to distinguish between nonorthogonal states, 
and they can be i mplemented with N ports as well 
(Mver sand Brandt 19971) . Other optical realizations of 
non-unitary transformations were studied by Bergou et 
al. (2000). 

The inability to perform a deterministic two-qubit 
gate such as the CNOT with linear òptics alone is inti- 
mately related to the impossibility of complete Bell mea- 
surements with linear ò p tics ( Lütkenhaus et al. 1999t 
Vaid man and Yoran 1999; Calsamig ría"2002l) . Since 
quantum computing can be cast into the shape 
of sin gle-qubit operations and two-qubit projections 
(Nielsen 2003; Leung 2004), we can approach the prob- 
lem of making nonlinear gates via complete discrimina- 
tion of multi-qubit bases. 

Van Loock and Lütkenhaus gave straightfor- 
ward criteria for the implementation of com- 
plete projective measurements with linear òptics 
llvan Loock and Lütkenhaus 20041) . Suppose the basis 
states we want to identify without ambiguity are given 
by {|sj.}}, and the auxiliary state is given by \ipnux)- 
Applying the unitary N port transformation yields the 
state \xk)- If me outgoing optical modes are denoted by 
dj, with corresponding annihilation operators àj, then 
the set of conditions that ha ve to be fulfilled for 
to be completely distinguishable are 



{Xk\à)àj\xi, 
(Xk\à)àjà)>àf\xi, 
(Xk\àjàjàj>àj'àfiài"\xï 



= V; 
= V/,/ 
= V/,/,/' 



(34) 



Furthermore, when we keep the specific optical im- 
plementation in mind, we can use intuitive physical 
principies such as photon number conservation and 
group-theoretical techniques such as the decomposition 
of U(N) into smaller groups. This gives us an insight 
into how the auxiliary states and th e photon detectio n 
affects the (undetected) signal state IScheel et al. 2 003). 
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FIG. 20 The CZ applied to two qubits inside a quantum circuit. 
If it fails, then the two qubit states are lost. 
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FIG. 21 The teleportation circuit. The state \cj)j) is teleported 
via an entangled quantum channel |® + ) and a Bell measure- 
ment B. The binary variables x and z parameterise the out- 
come of the Bell measurement and determine which Pauli op- 
erator is applied to the output mode. 



So far we have generally focused on the means neces- 
sary to perform single-qubit rotations and CNOT gates. 
It is well known that such gates are sufficient for univer- 
sal computation. However, it is not necessary to restrict 
ourselves to such a limited set of operations. Instead, 
it is possible to extend our operations to general cir- 
cuits that can be constructed from linear elements, single 
photon sources, and detectors. This is analogous to the 
shift in classical computing from a RISC (Reduced In- 
struction Set Computer) architecture to the CISC (Com- 
plex Instruction Set Computer) architecture. The RISC- 
based architecture in quantum computing terms could 
be thought of as a device built only from the minimum 
set of gates, while a CISC-based machine would be built 
from a much larger set; a natural set of gates allowed 
by the fundamental resources. The quantum SWAP op- 
eration illustrates this point. From fundamental gates, 
three CNOTs are required to build such an operation. 
However, from fundamental optical resources only two 
beam splitters and a phase shifter are necessary. Scheel 
et al. (2003) focused their attention primarily on one- 
mode and two-mode situations, though the approach is 
easily extended to multi-mode situations. They differ- 
entiated between operations that are easy and that are 
potentially difficult. For example, operations that cause 
a change in the Fock layers (for instance the Hadamard 
operator) are generally difficult but not impossible. 



F. Scalable optical circuits and quantum teleportation 

When the gates in a computational circuit succeed only 
with a certain probability p, then the entire calculation 
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that uses N such gates succeeds with probability p N . 
For large N and small p, this probability is minuscule. 
As a consequence, we have to repeat the calculation on 
the order of p~ N times, or run p~ N such systems in par- 
al·lel. Either way, the resources (time or circuits) scale 
exponentially with the number of gates. Any advantage 
that quantum algorithms might have over classical pro- 
tocols is thus squandered on retrials or on the amount 
of hardware we need. In order to do useful quantum 
computing with probabilistic gates, we have to take the 
probabilistic elements out of the running calculation. 

In 1999, Gottesman and Chuang proposed a trick that 
removes the probabilistic gate from the quantum circuit, 
and places it in the resources that can be prepared off- 
line (Gottesman and Chuang 1999). It is commonly re- 
ferred to as the teleportation trick, since it "teleports the 
gate in to the quantum circuit." 

Suppose we need to apply a probabilistic CZ gate to 
two qubits with quantum states \(p\) and ((fe) respec- 
tively. If we apply the gate directly to the qubits, we are 
very likely to destroy the qubits (see Fig. 1201. However, 
suppose that we teleport both qubits from their initial 
mode to a different mode. For one qubit, this is shown 
in Fig. |^ Here, x and z are binary variables, denoting 
the outcome of the Bell measurement, which determine 
the unitary transf ormation that we need to apply to the 
output mode. If x — 1, we need to apply the a x Pauli op- 
erator (denoted by X), and if z = 1, we need to apply a z 
(denoted by Z). If x, z = we do not apply the respec- 
tive operator. For teleportation to work, we also need 
the entangled resource | ® + ), which can be prepared off- 
line. If we have a suitable storage device, we do not have 
to make 1 + ) on demand: we can create it with a proba- 
bilistic protocol using several trials, and store the output 
of a successful event in the storage device. 

When we apply the probabilistic CZ gate to the out- 
put of the two teleportation circuits, we effectively have 
again the situation depicted in Fig. 1201 except that now 
our circuit is much more complicated. Since the CZ 
gate is part of the Clifford group, we can commute it 
through the Pauli operators X and Z at the cost of more 
Pauli operators. This is good news, because that means 
we can move the CZ gate from the right to the left, 
and only incur the optically available single-qubit Pauli 
gates. Instead of preparing two entangled quantum 
channels I®" 1 "}, we now have to prepare the resource 
t® ïi cz ® <g> |í> + ) (see Fig. E2). A gain, with a 

suitable storage device, this can be done off-line with 
a probabilistic protocol. There are now no longer any 
probabilistic elements in the computational circuit. 



G. The Knill-Laflamme-Milburn protocol 

Unfortunately, there is a problem with the teleporta- 
tion trick when applied to linear òptics: In our qubit 
representation the Bell measurement (which is essential 
to quantum teleportation) is not complete, and works 
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FIG. 22 The CZ gate using teleportation: here, |i/>) = 
Uczl'í'l'fe)- By commuting the CZ gate through the Pauli 
gates from the computational circuit to the teleportation re- 
sources, we have taken the probabilistic part off-line. We can 
prepare the teleportation channel (the shaded area, including 
the CZ) in many trials, without disrupting the quantum com- 
putation. 



at best only half of the time llLütkenhaus et al. 19991: 
Vaid man and Yoran 1999). It seems that we are back 
where we started. This is one of the problems of linear 
optical quantum computing that was solved by Knill, 
Laflamme, and Milburn (2001). 

In the KLM scheme, the qubits are chosen from the 
dual-rail representation. However, in the KLM proto- 
col the teleportation trick applies to the single-rail state 
oc\0) + /3|1), where |0) and |1) denote the vacuum and 
the single-photon Fock state respectively, and <x and /3 
are complex coefficients (this is because the CZ gate in- 
volves only one optical mode of each qubit). Linearity of 
quantum mechanics ensures that if we can teleport this 
state, we can also teleport any coherent or incoherent 
superposition of such a state. 

Choose the quantum channel to be the 2n-mode state 



\tn) 



j=0 



l)>'|0)"-> |0)>'|1) 



(35) 



where \k)i = \k)\ <2> . . . ® \k)j. We can then teleport the 
state oc\0) + /3|1) by applying an n + 1-point discrete 
quantum Fourier transform (QFT) to the input mode 
and the first n modes of \t n ), and count the number of 
photons m in the output mode. The input state will then 
be teleported to mode n + mof the quantum channel 
(see Fig. . 

The discrete quantum Fourier transform F n can be 
written in matrix notation as: 



(Fn, 



: exp 



Ini 



(;-!)(*- 1) 



(36) 



It erases all path information of the incoming modes, 
and can be interpreted as the n-mode generalisation of 
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FIG. 23 Near-deterministic teleportation according to Knill, 
Laflamme and Milburn. The input state \<p) = a\0) + j3|l) is 
teleported to the m th outgoing mode, where m is the number 
of detected photons in the measurement of the (n + l)-point 
quantum Fourier transform. Note that |i/>) is a single-rail state; 
and 1 denote photon numbers here. 



the 50:50 beam splitter. To see how this functions as a 
teleportation protocol, it is easiest to consider an exam- 
ple. 

Suppose, we choose n = 5, such that the state \t n ) 
describes ten optical modes, and assume further that 
we count two photons (m = 2). This setup is given in 
Fig. EU The two rows of zeros and ones denote two 
terms in the superposition \t$). The five numbers on 
the left are the negative of the five numbers on the right 
(from which we will choose the outgoing qubit mode). 
It is then clear from this diagram that when we find two 
photons, there are only two ways this could come about: 
either the input mode did not have a photon (associated 
with amplitude oc), in which case the two photons orig- 
inated from |fs), or the input mode did have a photon, 
in which case the state | Í5) provided the second photon. 
However, by construction of 1 1 5 ) , the second mode of the 
five remaining modes must have the same number of 
photons as the input mode. And because we erased the 
which-path inf ormation of the measured photons using 
the Fg transformation, the two possibilities are added co- 
herently. This means that we teleported the input mode 
to mode 5 + 2 = 7. In order to keep the amplitudes of 
the output state equal to those of the input state, the rel- 
ative amplitudes of the terms in |f„) must be equal. 

Sometimes, this procedure fails, however. When we 
count either zero or n + 1 photons in the output of the 
QFT, we collapsed the input state onto zero or one pho- 
tons respectively. In those cases we know that the tele- 
portation failed. The success rate of this protocol is 
n/(n + 1) (where we used that \a\ 2 + \ j3\ 2 = 1). We can 
make the success probability of this protocol as large as 
we like by increasing the number of modes n. The suc- 
cess probability for teleporting a two-qubit gate is then 
the square of this probability n 2 /(n + l) 2 , because we 
need to teleport two qubits successfully. The quantum 
teleportation of a superposition state of a single photon 



m = 2 



FIG. 24 The 5-photon ancillary scheme for near-deterministic 
teleportation. 



with the vacuum was realized by Lombardi et al. (2002) 
using spontaneous parametric down-conversion. 

Now that we have a (near-) deterministic teleporta- 
tion protocol, we have to apply the probabilistic gates to 
the auxiliary states \t n ). For the CZ gate, we need the 
auxiliary state 



cz„) = 



1,1=0 



(n-i){n-j)^y^Q\n-i 
x|0)'|l)"-' \l)i\0) n -i \0)i\l)"-i . (37) 



The cost of creating this state is quite high. In the next 
section we will see how the addition of error correcting 
codes can alleviate this resource count somewhat. 

At this point, we should resolve a paradox: Earlier re- 
sults have shown that it is impossible to perform a deter- 
ministic Bell measurement with linear òptics. However, 
teleportation relies critically on a Bell measurement of 
some sort, and we have just shown that we can perform 
near-deterministic teleportation with only linear òptics 
and photon counting. The resolution in the paradox lies 
in the fact that the impossibility proofs are concerned 
with exact deterministic Bell measurements. The KLM 
variant of the Bell measurement always has an arbitrar- 
ily small error probability e. We can achieve scalable 
quantum computing by making e smaller than the fault- 
tolerant threshold. 

One way to boost the probability of success of the 
teleportation protocol is to minimise the amplitudes of 
the j — and j = n terms in the superposition \t n ) 
of Eq. 1351 . At the cost of changing the relative am- 
plitudes (and therefore introducing a small error in the 
teleported output state), the success probability of tele- 
porting a single qu bit can then be boosted to 1 — 1 /n 2 
ÍFranson et al. 20021) . The downside of this proposal is 
that the errors become less well-behaved: Instead of per- 
fect teleportation of the state a|0) + (í\l) with an occa- 
sional o~ z measurement of the qubit, the Franson varia- 
tion will yield an output state Cja\0) + Cj_\ji\l), where 
í is known and the c< are the amplitudes of the modified 
|f„). There is no simple two-mode unitary operator that 
transforms this output state into the original input state 
without knowledge about oc and /3. This makes error 
correction much harder. 

Another variation on the KLM scheme due to 
Spedalieri et al. (2005) redefines the teleported qubit 
ct|0) + /3|1) and Eq. <35t . The vacuum state is replaced 
with a single horizontally polarised photon, |0) — ► |H), 
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and the one-photon state is replaced with a vertically 
polarised photon, |1) — > \V). There are now 2n rather 
than n photons in the state \t n ). The teleportation pro- 
cedure remains the same, except that we now count the 
total number of vertically polarised photons. The ad- 
vantage of this approach is that we know that we should 
detect exactly n photons. If we detect m 7^ n photons, 
we know that something went wrong, and this theref ore 

Èrovides us with a level of error detection (see also section 
J 

Of course, having a near-deterministic two-qubit gate 
is all very well, but if we want to do arbitrarily long 
quantum computations, the success probability of the 
gates must be close to one. Instead of making larger 
teleportation networks, it might be more cost effective 
or easier to use a form of error correction to make the 
gates deterministic. This is the subject of the next sec- 
tion. 



H. Error correction of the probabilistic gates 

As we saw in the previous section the probability of 
success of teleportation gates can be increased arbitrar- 
ily by preparing larger entangled states. However the 
asymptotic behaviour to unit probability is quite slow as 
a function of n. A more efficient procedure is to encode 
against gate failure. This is possible because of the well- 
defined failure mode of the teleporters. We noted in the 
previous section that the teleporters f ail if zero or n + 1 
photons are detected because we can then infer the log- 
ical state of the input qubit. In other words the failure 
mode of the teleporters is to measure the logical value 
of the input qubit. If we can encode against accidental 
measurements of this type then our qubit will be able to 
survive gate failures and the probability of eventually 
succeeding in applying the gate will be increased. 

KLM introduced the following logical encoding over 
two polarisation qubits: 

|0) L = \HH) + \VV) 

\1) L = \HV) + \VH) (38) 

This is referred to as parity encoding as the logical zero 
state is an equal superposition of the even parity states 
and the logical one state is an equal superposition of the 
odd parity states. Consider an arbitrary logical qubit: 
ce[0)x, + Suppose a measurement is made on one 

of the physical qubits returning the result H. The effect 
on the logical qubit is the projection: 

a\0) L + l3\l) L ^a\H) + l3\V) (39) 

That is, the qubit is not lost, the encoding is just reduced 
from parity to polarisation. Similarly if the measure- 
ment result is V we have: 

a\0) L + l3\l) L ^a\V)+l3\H) (40) 



Again the superposition is preserved, but this time a bit- 
flip occurs. However, the bit-flip is heralded by the mea- 
surement result and can theref ore be corrected. 

Suppose we wish to teleport the logical value of a par- 
ity qubit with the t\ teleporter. We attempt to teleport 
one of the polarisation qubits. If we succeed we mea- 
sure the value of the remaining polarisation qubit and 
apply any necessary correction to the teleported qubit. 
If we fail we can use the result of the teleporter failure 
(did we find zero photons or two photons?) to correct 
the remaining polarisation qubit. We are then able to try 
again. In this way the probability of success of teleporta- 
tion is increased from 1 /2 to 3/4. At this point we have 
lost our encoding in the process of teleporting. How- 
ever, this can be fixed by introducing the following en- 
tanglement resource: 

|H>|0) L + |V)|1> L (41) 

If teleportation is successful, the output state remains 
encoded. The main observation is that the resources re- 
quired to construct the entangled state of Eq. J41I are 
much less than those required to construct ^3). As a re- 
sult, error encoding turns out to be a more efficient way 
to scale up teleportation and hence gate success. 

Parity encoding of an arbitrary polarisation qubit can 
be achieved by performing a CNOT gate between the 
arbitrary qubit and an ancilla qubit prepared in the di- 
agonal state, where the arbitrary qubit is the target and 
the ancilla qubit is the control. This operation has been 
demonstrated experimentally lOT Men et al. 20051) . In 
this experiment the projections given by Eqs. I39t and 
J40l > were confirmed up to fidelities of 96%. In a subse- 
quent experiment by Pittman et al., the parity encoding 
was prepared in a somewhat different manner and, in 
order to correct the bit-fli p errors, a feed-forw ard mech- 
anism was implemented I Pi ttman et al. 20 05). 

To boost the probability of success further, we need to 
increase the size of the code. The approach adopted by 
Knill, Laflamme and Milburn (2001) was to concatenate 
the code. At the first level of concatenation the parity 
code states become: 

|0)[ 4) = |00) L + |11) L 

|1)[ 4) = |01) L + |10) L (42) 

This is now a four-photon encoded state. At the second 
level of concatenation we would obtain an eight-photon 
state etc. At each higher level of concatenation, cor- 
responding encoded teleportation circuits can be con- 
structed that operate with higher and higher probabil- 
ities of success. 

If we are to use encoded qubits we must consider a 
universal set of gates on the logical qubits. An arbi- 
trary rotation about the x-axis, defined by the opera- 
tion Xg = cos (9/2)1 — z'sin (0/2)X, is implemented on 
a logical qubit by simply implementing it on one of the 
constituent polarisation qubits. However, to achieve ar- 
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bitrary single qubit rota tions we also require a n/2 rota- 
tion about the z-axis, i.e. Z^ 2 = \/y/ï{I-iZ). This can 
be implemented on the logical qubit by applying Z n j 2 to 
each constituent qubit and then applying a CZ gate be- 
tween the constituent qubits. The CZ gate is of course 
non-deterministic and so the Z n / 2 gate becomes non- 
deterministic for the logical qubit. Thus both the Z n / 2 
and the logical CZ gate must be implemented with the 
teleportation gates in order to f orm a univers al gate set 
for the logical qubits. In Ref. iKnil l et al. 200 0) it is re- 
ported that the probability of successfully implementing 
a Z n j2 gate on a parity qubit in this way is Pz = 1 — fz 
where 



f 2 (2~f) 
1-/(1"/) 



(43) 



and / is the probability of failure of the teleporters act- 
ing on the constituent polarisation qubits. One can ob- 
tain the probability of success after concatenation itera- 
tively. For example the probability of success after one 
concatenation is Pzi = 1 — fzi where Fzi = F|(2 — 
fz)/(l — Fz(l — Fz)). The probability of success for a 
CZ gate between two logical qubits is Pqz = (1 — Fz) 2 - 
Notice that, for this construction, an overall improve- 
ment in gate success is not achieved unless / < 1/2. 
Using these results one finds that first level concate- 
nation and Í3 (f = 1/4) teleporters are required to 
achieve a CZ gate with better than 95% probability of 
success. It can be estimated that of order 10 4 operations 
would be requi red in order to implement such a gate 
Jl·layes et al. 20041) . 

So the physical resources for the original KLM pro- 
tocol, albeit scalable, are daunting. For linear optical 
quantum computing to become a viable technology, we 
need more efficient quantum gates. This is the subject of 
the next section. 




FIG. 25 A typical cluster state. Every circle represents a logical 
qubit, and the vertices represent CZ operations. A quantum 
computation proceeds by performing single-qubit measure- 
ments on the left column of qubits, thus removing them from 
the cluster and teleporting the quantum information through 
the cluster state. The vertical links induce two-qubit opera- 
tions. 



circumve nts the need for the v erv costly KLM-type tele- 
portation (Gilchris t et al. 20051) . After a brief introduc- 
tion to cluster state quantum computing, we will de- 
scribe these different proposals. 



A. Cluster states in optical quantum computing 

In the traditional circuit-based approach to quantum 
computing, quantum information is encoded in qubits, 
which subsequently undergo single- and two-qubit op- 
erations. There is, however, an alternative model, 
called the cluster-state model of quantum computing 
jRaussendorf and Briegel 20011) . In this model, the 
quantum information encoded in a set of qubits is tele- 
ported to a new set of qubits via entanglement and 
single-qubit measurements. It uses a so-called cluster 
state in which physical qubits are represented by nodes 
and entanglement between the qubits is represented by 
connecting lines (see Fig. l25> . Suppose that the qubits in 
the cluster state are arranged in a lattice. The quantum 
computation then consists of performing single-qubit 



III. IMPROVEMENTS ON THE KLM PROTOCOL 

We have seen that the KLM protocol explicitly telis us 
how to build scalable quantum computers with single- 
photon sources, linear òptics, and photon counting. 
However, showing scalability and providing a practical 
architecture are two different things. The overhead cost 
of a two-qubit gate in the KLM proposal, albeit scalable, 
is prohibitively large. 

If linear optical quantum computing is to become 
a practical technology, we need less resource-intensive 
protocols. Consequently, there have been a num- 
ber of proposals that improve the scalability of the 
KLM scheme. In this section we review these pro- 
posals. Several improvements are based on cluster- 
state techniques tïbrarLa nd Reznik 20031 iNielsen 2004t 
iBrowne and Ru dolph 2005), and recently a circuit-based 
model of optical quantum computing was proposed that 
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FIG. 26 Different cluster and graph states. (a) A linear cluster 
of five qubits. (b) A cluster representing the Bell states. (c) 
A four-qubit GHZ state. This state can be obtained by an X- 
measurement of the central qubit in (a). (d) A general GHZ 
state. 
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measurements on a "column" of qubits, the outcomes 
of which determine the basis for the measurements on 
the next column. Single qubit gates are implemented by 
choosing a suitable basis for the single-qubit measure- 
ment, while two-qubit gates are induced by local mea- 
surements of two qubits exhibiting a vertical link in the 
cluster state. 

Two-dimensional cluster states, i.e., states with verti- 
cal as well as horizontal links, are essential for quantum 
computing, as linear cluster-state comput ing, can be effi - 
ciently simulated on classical computers iNielsen 2005). 
Since single-qubit measurements are relatively easy to 
perform when the qubits are photons, this approach 
is potentially suitable for linear optical quantum com- 
puting: Given the right cluster state, we need to per- 
form only the photon detection and the feed-forward 
post-processing. Verstraete and Cirac (2004) demon- 
strated how the teleportation-based computing scheme 
of Gottesman and Chuang could be related to clusters. 
They derived their results for genèric implementations 
and did not address the special demands of òptics. 

Before we discuss the various proposals for efficient 
cluster-state generation, we present a few more proper- 
ties of cluster states. Most importantly a cluster such 
as the one depicted in Fig.|55|does not correspond to a 
unique quantum state: It represents a family of states 
that are equivalent up to local unitary transformations 
of the qubits. More precisely a cluster state |C) is an 
eigenstate of a set of commutin g operators S; called the 
stabiliser generators (Raussendorf et al. 2003): 



SAC) 



±\C) Vi 



(44) 



Typically, we consider the cluster state that is a +1 eigen- 
state for all Sj. Given a graphical representa tion of a 
cluster state, we can write down the stabiliser genera- 
tors by following a simple recipe: Every qubit i (node 
in the graph) generates an operator S,-. Suppose that a 
qubit labelled q is connected to k neighbours labelled 1 
to k. The stabiliser generator Sq for qubit q is then given 
by 



;'=i 



(45) 



For example, a (simply connected) linear cluster chain of 
five qubits labelled a, b, c, d, and e (Fig. I26h ) is uniquely 
determined by the following five stabiliser generators: 
S a = X fl Z;„ Sj, = Z a XjjZ c , S c = Z^XcZ^, Sjj = ZcX^Zf, 
S e — ZrfXf!. It is easily verified that these operators com- 
mute. Note that this recipe applies to general graph 
states, where every node (i.e., a qubit) can have an ar- 
bitrary number of links with other nodes. The rectangu- 
lar shaped cluster states are a subset of the set of graph 
states. 

Consider the following important examples of clus- 
ter and graph states: The connected two-qubit cluster 
state is locally equivalent to the Bell states (Fig. 126b), and 
a linear three-qubit cluster state is locally equivalent to 
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FIG. 27 Using the "hyper-entanglement" of the polarisation 
and which-path observables, a single photon spans a four- 
dimensional Hilbert space {\H, 1), \H,Z), \V, 1), | V,2)}. A 
simple 50:50 beam-splitter and polarisation rotation then fur- 
nishes a deterministic transformation from the computational 
basis to the Bell basis. 



a three-qubit GHZ (Greenberger-Horne-Zeilinger) state. 
These are states that are locally equivalent to 1 0, . . . , 0) + 
1 1, . . . , 1) . In general, GHZ states can be represented by 
a star-shaped graph such as shown in Fies. 126b and!26H. 

To build the cluster state that is needed for a quantum 
computation, we can transform one graph state into an- 
other using entangling operations, single-qubit opera- 
tions and single-qubit measurements. A Z measurement 
removes a qubit from a cluster a nd severs all the bonds 
that it had w ith the cluster (Raussendorf et al. 2003: 
Il·lein et al. 2004|) . An X measurement on a qubit in a 
cluster removes that qubit from the cluster, and it will 
transfer all the bonds of the original qubit to a neigh- 
bour. All the other neighbours become single con- 
nected qubits to the neighbour t hat inherited the bonds 
(Rausse ndorf et al. 2003 t lHein et al. 2004|) . 

There is a well-defined physical recipe for creating 
cluster or graph states, such as the one shown in Fig. 1251 
First of all, we prepare all qubits in the state (|0) + 
1 1) ) / Vl. Secondly we apply a CZ-gate to all qubits that 
are to be linked with a horizontal or vertical line, the or- 
der of which does not matter. 

To make a quantum computer using the one-way 
quantum computer, w e need two-dimensional clus- 
ter states INielsen 2005). Computation on linear clus- 
ter chains can be simulated efficiently on a classi- 
cal computer. Furthermore, two-dimensional cluster 
states can be created with Clifford group gates. The 
Gottesman-Rnill theorem then implies that the single- 
qubit measurements implementing the quantum com- 
putation must include non-Pauli measurements. 

It is the entangling operation that is problemàtic in 
òptics, since a linear optical CZ gate in our qubit rep- 
resentation is inherently probabilistic. There have been, 
however, several proposals for making cluster or graph 
states with linear òptics and photon detection, and we 
will discuss them in chronological order. 
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FIG. 28 A typical three-qubit quantum computational circuit. 
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FIG. 29 The computational circuit of F ig. |2"ÏÏ1 in terms of the 
physical implementation by I Yoran and Reznik 2003). This is 
reminiscent of the cluster-state model of quantum comput- 
ing. The open and closed dots represent the polarisation and 
which-path degrees of freedom, respectively. 



B. The Yoran-Reznik protocol 

The first proposal for linear optical quantum comput- 
ing along these lines by Yoran and Reznik (2003) is not 
strictly based on the cluster-state model, but it has many 
attributes in common. Most notably, it uses "entangle- 
ment chains" of photons in order to pass the quantum 
information through the circuit via teleportation. 

First of all, for this protocol to work, the nondeter- 
ministic nature of optical teleportation must be circum- 
vented. We have already remarked several times that 
complete (deterministic) Bell measurements cannot be 
perf ormed in the dual-rail and polarisation qubit repre- 
sentations of linear optical quantum computing. How- 
ever, in a different representation this is no longer the 
case. Instead of the traditional dual-rail implementa- 
tion of qubits, we can encode the information of two 
qubits in a single photon when we include both the po- 
larisation and the spatial degree of freedom. Consider 
the device depicted in Fig.[27| A single photon carrying 
specific polarisation and path information is then trans- 
formed as I Popescu 1995|) : 
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FIG. 30 How to add a link to the YR chain. This will create the 
state given in Eq. 1471 with n + 1 = 5. The four vertically con- 
nected grey circles represent the probabilistic CZ gate. Note 
that we need two of them. 



These transformations look tantalisingly similar to the 
transformation from the computational basis to the Bell 
basis. However, there is only one photon in this sys- 
tem. The second "qubit" is given by the which-path in- 
formation of the input modes. By perf orming a polarisa- 
tion measurement of the output modes 3 and 4, we can 
project the input modes onto a "Bell state". This type 
of entanglement is sometimes called hyper-entanglement, 
since it involves more than one observable of a single 
svstem jKwiat and Weinfurter 199*3 iBarreiro et al. 2005; 
Cinell i et al. 20 05). A teleportation experiment based on 
this mechanism was performed by Boschi et al. (1998). 

It was shown by Yoran and Reznik how these trans- 
formations can be used to cut down on the number of 
resources: Suppose we want to implement the computa- 
tional circuit given in Fig.[5~~| We will then create (highly 
entangled) chain states of the form 
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where the individual photons are labelled by pj. This 
state has the property that a Bell measurement of the 
form of Eq. J46> on the first photon p\ will teleport the 
input qubit oc\H) + j3| V) to the next photon pi- 

Let's assume that we have several of these chains run- 
ning in parallel, and that furthermore, there are vertical 
"cross links" of entanglement between different chains, 
just where we want to apply the two-qubit gates \X\, Mi, 
and U3. This situa tion is sketched in Fig.[5H] The transla- 
tion into optical chain states is given in Fig.|29] The open 
circles represent polarisation, and the dots represent the 
path degree of freedom. In Fig.1301 the circuit that adds a 
link to the chain is shown. The unitary operators M\, U2, 
and U3 are applied to the polarisation degree of freedom 
of the photons. 

Note that we still need to apply two probabilistic CZ 
gates in order to add a qubit to a chain. However, 
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whereas the KLM scheme needs the teleportation pro- 
tocol to succeed with very high probability (scaling as 
n 2 /(n + l) 2 ) in the protocol proposed by Yoran and 
Reznik the success probability of creating a link in the 
chain must be larger than one half . This way, the entan- 
glement chains grow on average. This is a very impor- 
tant observation and plays a key role in the protocols 
discussed in this section. Similarly, a vertical link be- 
tween the entanglement chains can be established with 
a two-qubit unitary operation on the polarisation degree 
of freedom of both photons (c.f. the vertical lines be- 
tween the open dots in Fig. 1291 . If the gate fails, we can 
grow longer chains and try again until the gate succeeds. 

C. The Nielsen protocol 

A more explicit use of cluster-state quantum comput- 
ing was made by Nielsen (2004). As Yoran and Reznik, 
Nielsen recognised that in order to build cluster states, 
the probability of adding a link to the cluster must be 
larger than one half, rather than arbitrarily close to one. 
Otherwise the cluster will shrink on average. The KLM 
teleportation protocol allows us to apply a two-qubit 
gate with probability n 2 /(n + l) 2 , depending on the 
number n of ancillary photons. Let us denote a CZ gate 
with this success probability by CZ n 2 /r n+ i\z. This gate 
can be used to add qubits to a cluster chain. When 
the gate fails, it removes a qubit from the cluster. This 
means that, instead of using very large n to make the 
CZ gate near-deterministic, íinks can be added on aver- 
age with a modest CZ g / 16 -gate, or n = 3. This leads to 
similarly reduced resource requirements as the Yoran- 
Reznik protocol, while still keeping (in principle) error- 
free quantum computing. However, there is an extra 
gain in re sources av ailable when we try to add a qubit 
to a chain lNielse n2004T) . 

Suppose that we wish to add a single qubit to a clus- 
ter chain via the teleportation-based CZ gate. Instead of 
teleporting the two qubits simultaneously, we first tele- 
port the disconnected qubit, and secondly teleport the 
qubit at the end of the cluster. We know that a tele- 
portation failure will remove the qubit from the cluster, 
so we attempt the second teleportation protocol only af- 
ter thefirst has succeeded. The first teleportation protocol 
then becomes part of the off-line resource preparation, 
and the CZ gate effectively changes from CZ n 2 /(„+i) 2 to 
CZ n /( n+ iy The growth requirement of the cluster state 
then becomes n/(n + 1) > 1/2, or n = 2, and we make 
another substantial saving in resources. 

Apart from linear cluster states, we also need the abil- 
ity to make the two-dimensional clusters depicted in 
Fig- This is equivalent to linking a qubit to two clus- 
ter chains, and hence needs two successful CZ gates. Ar- 
guing along the same lines as before, it is easily shown 
that the success probability is 4/9 for this procedure 
using two ancillae per teleportation gate. Since this is 
smaller than one half, this procedure on average removes 



qubits from the cluster. However, we can first add ex- 
tra qubits with the previous procedure, such that there 
is a buf fer of qubits in the cluster state. This way, the 
average shrinkage of the cluster due to vertical links is 
absorbed by the buffer region. 

Finally, Nielsen introduces so-called micro-clusters 
consisting of múltiple qubits connected to the end point 
of a cluster chain. Such a micro-cluster is depicted in 
Fie.l26fl, where the central qubit is an endpoint of a clus- 
ter chain. Having such a fan of qubits at the end of a 
chain, we can retry the entangling gate as many times 
as there are "dangling" qubits. This removes the lower 
limit on the success probability of the CZ gate at the cos t 
of making large GHZ states I Nielsen and Dawson 2 004). 
Therefore, any optical two-qubit gate with arbitrary suc- 
cess probability p can be used to make cluster states ef- 
ficiently. 

D. The Browne-Rudolph protocol 

There is still a cheaper way to grow cluster states. In 
order for a cluster chain to grow on average without us- 
ing expensive micro-clusters, the success probability of 
adding a single qubit to the chain must be larger than 
one half. However, if we can add small chains of qubits 
to the cluster, this requirement may be relaxed. Sup- 
pose that the success probability of creating a link be- 
tween two cluster chains is p, and that in each successful 
linking of two chains we lose d s qubits from the chain. 
This might happen when the entangling operation join- 
ing the two clusters involves the detection of qubits 
in the cluster. Similarly, in an unsuccessful attempt, 
we may lose df qubits from the existing cluster chain 
(we do not count the loss of qubits in the small chain 
that is to be added). If our existing cluster chain has 
length N, and the chain we wish to add has length m, 
then we can formulate the followin g growth requir ement 
(Barrett and Kok 2005: lBrowne and Rudolp h 20051) : 

p{N + m-d s ) + (1 - p){N-d f ) > N 
^ m>P d s + (l-p)d f 

V 

Given a specific strategy (d s ,df) and success probability 
p, we need to create chains of length m off-line in or- 
der to make large cluster chains efficiently. Note that, 
again, there is no lower limit to the success probability p 
of the entangling operation in principle. This allows us 
to choose the optical gates with the most desirable phys- 
ical properties (other than high success probability), and 
it means that we do not have to use the expensive and 
error-prone CZ n ii n +i) gates. 

Indeed, Browne and Rudolph introduced a proto- 
col for generating cluster s tates using the pr obabilistic 
paritv gates of section lÏLBl dBrowne and Rudolph 2005t 
ICerf et al. 1991 |pïïtmann e t al. 20011) . The notable ad- 
vantage of this gat e is that it is r elativelv easy to imple- 
ment in practice I Pittm an et al. 2 002b). and that it can be 
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(a) type-I (b) type-H 




FIG. 31 Two types of fusion operators. (a) the type-I fusion 
operator employs a polarisation beam splitter (PBS1) followed 
by the detection D of a single output mode in the 45° rotated 
polarisation basis. This operation determines the parity of the 
input mode with probability 1/2. (b) the type-II fusion oper- 
ator uses a diagonal polarisation beam splitter (PBS2), detects 
both output modes, and projects the input state onto a maxi- 
mally entangled Bell state with probability 1/2. 

made robust against common experimental errors. Ini- 
tially these gates were called parity gates, but following 
Browne and Rudolph, we call these the type-I and type- 
II fusion gates (see Fig.l5Tl. 

Let us first consider the operation of the type-I fusion 
gate in Fie.Blk. Given the detection of one and only one 
photon with polarisation H or V in the detector D, the 
gate induces the following projection on the input state: 

"H": -j=(\H)(H,H\-\V)(V,V\) 

"V": -±=(\H)(H,H\ + \V){V r V\). (49) 

It is easily verified that the probability of success for this 
gate is p — 1/2. When the type-I fusion gate is applied 
to two photons belonging to two different cluster states 
containing ri\ and «2 photons, respectively, a success- 
ful operation will generate a cluster chain of n\ + «2 — 1 
photons. However, when the gate fails, it effectively 
performs a <r z measurement on both photonic qubits, 
and the two cluster states both lose the qubit that was 
detected. The type-I fusion gate is therefore a (1,1)- 
strategy, i.e., d s = df = 1 (recali that we count only the 
loss of qubits on one cluster to determine dj). The ideal 
growth requirement ism>l/p = 2. 

Browne and Rudolph also introduced the type-II fu- 
sion operator (see Fie.l31b). This operation involves the 
photon detection of both output modes of a polarisation 
beam splitter, and a successful event is heralded by a 
detector coincidence (i.e., one photon with a specific po- 
larisation in each detector). When successful, this gate 
projects the two incoming qubits onto one of two polar- 
isation Bell states, depending on the detection outcome: 

"H, V" or " V,H" : ( | H, H) + | V, V ) ) 

v2 

"H,H" or " V,V" : -L ( | H, V } + \ V, H) ) . (50) 



The success probability of this gate is p = 1/2, and it is a 
(2, l)-strategy (i.e., d s = 2andd^ = 1). The ideal growth 
requirement is thus m > (1 + p) / p = 3. The type- 
II fusion gate is essentially a version of the irtcom plete 
optical Bell mea surement jBraunstein and Mann 199ét 
Weinfurt eT 19941) . 

Note that in order to grow long chains, we must be 
able to create chains of three qubits. Given a plenti- 
ful supply of Bell pairs as our fundamental resource, 
we can make three-qubit chains only with the type-I fu- 
sion gate, since the type-II gate necessarily destroys two 
qubits. This also indicates a significant difference be- 
tween this protocol and the previous ones: Using only 
single-photon sources, the fusion gates alone cannot cre- 
ate cluster states. We can, however, use any method to 
create the necessary Bell pairs (such as the CZ gate in 
section lÏLA> , as they constitute an off-line resource. 

Upon successful operation, both the type-I and the 
type-II fusion gates project two qubits that are part of 
a cluster onto a polarisation Bell state. When we apply 
a Hadamard operation to one of the qubits adjacent to 
the detected qubit(s), the result will again be a cluster 
state. However, upon failure the characteristics of the 
fusion gates are quite different from each other. When 
the type-I gate fails, it performs a Z measurement on the 
input qubits. When the type-II gate fails, it performs an 
X measurement on the input qubits. Recali that there is a 
fundamental difference between a Z and an X measure- 
ment on qubits in cluster states: A Z measurement will 
break all bonds with the qubits neighbours and removes 
it from the cluster. An X measurement will also remove 
the qubit from the cluster, but it will join its neighbours 
into a redundantly encoded qubit. In terms of the graphs, 
this corresponds to a qubit with dangling bonds called 
leaves or cherries (see also Fig.l2"6*b). 

When the measured qubits are both end points of 
cluster states (i.e., they have only one link to the rest of 
the cluster), failing type-I and type-II fusion gates have 
similar effects on the cluster states: They remove the 
qubits from the cluster. However, when the fusion gates 
are applied to two qubits inside a cluster (i.e., the qubits 
have two or more links to other qubits in the cluster), 
then the failure modes of the two fusion gates differ dra- 
matically: In particular when we apply the fusion gate 
to a qubit in a chain, a failed type-I gate will break the 
chain, while a failed type-II gate will only shorten the 
chain and create one redundantly encoded qubit next 
to the measured qubit. Since it is costly to re-attach a 
broken chain, it is best to avoid the type-I gate for this 
purpose. The redundancy induced by a failed type-II fu- 
sion gate is closely related to the error correction model 
in section|V] We will explore this behaviour further in 
the next section. 

Again, we need at least two-dimensional cluster states 
in order to achieve the level of quantum computing that 
cannot be simulated efficiently on a classical computer. 
Using the failure behaviour of the type-II fusion gate, 
we can construct an efficient way of creating the vertical 
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FIG. 32 The two probabilistic gates that complete a universal 
set. (a) the Z n i 2 gate uses a deterministic single-photon rota- 
tion and a single type-II fusion gate. (b) the CNOT gate uses 
one type-I and one type-II fusion gate. Both gates also need 
a parity measurement, which is implemented by cr 2 measure- 
ments on the individual physical qubits. 



links between linear cluster chains. We attempt a type- 
II fusion between two qubits that are part of different 
chains. If the gate succeeds, we have created a vertical 
link on the neighbouring qubits. If the gate fails, one 
neighbouring qubit to each detected qubit becomes re- 
dundantly encoded. The type-I fusion can now be at- 
tempted once more on the redundantly encoded qubits. 
If the gate succeeds, we established a vertical link. If the 
gate fails, we end up with two disconnected chains that 
are both two qubits shorter. Given sufficiently long lin- 
ear cluster chains, we can repeat this protocol until we 
have succeeded in creating a vertical link. A proof-of- 
principle experiment demonstrating optical cluster-state 
quantum computing wi th four photons was performed 
in Vienna I Walthe r et al. 20051) . 



E. Circuit-based optical quantum computing revisited 

After all this, one might conclude that the cluster- 
state approach to linear optical quantum informa- 
tion processing has completely replaced the circuit- 
based model. However, such a conclusion would 
be premature. In fact, in a slightly altered form, 
the redundancy that we encountered in the Browne- 
Rudolph protocol can be used to make a scalable circuit- 



based optical qu antum computer I Ha ves et al. 2004; 
Gilch rïst et al. 200*51) . We will now show how this is 
done. 

We can encode a logical qubit in n physical qubits us- 
ing t he parity encoding we encountered earlier in section 
IÏÏTT1 
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where |±) = (|H) ± \V))/V2. The superscript (n) de- 
notes the level of encoding. This encoding has the attrac- 
tive property that a computational-basis measurement 
of one of the physical qubits comprising the logical qubit 
\ip)( n ) will yield up to a local unitary on a sin- 

gle (arbitrary) physical qubit. In other words, no quan- 
tum informa tion has been lost (Gilchrist et al. 2005). 

One way to generate this encoding is to use the type- 
II fusion operator without the two polarisation rota tions 
(half-wave plates) in the input ports of the polarising 
beam splitter. This yields 
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with = a|0)M + j8|l)W. From this, we can im- 

mediately deduce that, given a success probability p, 
the growth requirement for the redundancy encoding 
iswz > (1 + p)/p. This is exactly the same scaling be- 
haviour as the Browne-Rudolph protocol when clusters 
are grown with the type-II fusion gate. 

In order to build circuits that are universal for quan- 
tum computing, we need a set of single-qubit op- 
erations, and at least one two-qubit entangling gate 
at the level of the parity encoded quits. As we 
have seen in section I11.H1 we can perform the opera- 
tions Xg and Z deterministically: The operator Xg = 
cos(0/2)l + i sin(0/2)o" x can be implemented by apply- 
ing this single-qubit operator to only one physical qubit 
of the encoding. The Z gate for an encoded qubit corre- 
sponds to a o~ z operation on all the physical qubits. 

To complete the universal set of gates, we also need 
the single-qubit gate Z n / 2 an d the CNOT. These gates 
cannot be implemented deterministically on parity- 
encoded qubits. In Fig.|321we show how to implement 
these gates using the fusion operators. The thickness of 
the lines denotes the level of encoding. In addition to the 
fusion operators, we need to perform a parity measure- 
ment on one of the qubits by doing cr z measurements 
on all the physical qubits in a circuit line. Since this 
measurement is performed on a subset of the physical 
qubits comprising a logical qubit, no quantum informa- 
tion is lost in this procedure. It should also be noted 
that we attempt the probabilistic fusion gates before the 
destructive parity measurement, so that in the case of a 
failed fusion operation, we still have sufficient redun- 
dancy to try the fusion again. It has been estimated 
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that universal gate operations can be implemented with 
> 99% probability of success with about 10 2 operations 
jGilchrist et al. 2005|) . 

This circuit-based protocol for linear optical quan- 
tum computation has many features in common with 
the Browne-Rudolph protocol. Although the cluster- 
state model is conceptually quite different from the 
circuit-based model, they have similar resource require- 
ments. Another point that the reader might be wonder- 
ing about, is whether these schemes are tolerant to pho- 
ton loss and other practical noise. The errors that we 
discussed so far originate from the probabilistic nature 
of linear optical photon manipulation, but can we also 
correct errors that arise from, e.g., detection inefficien- 
cies? We will discuss the realistic errors of linear optical 
component in the next section, and the possible f ault tol- 
erance of LOQC in the presence of these errors in section 

El 



IV. REALISTIC OPTICAL COMPONENTS AND THEIR 
ERRORS 

In order to build a real quantum computer based on 
linear òptics, single-photon sources, and photon detec- 
tion, our design must be able to deal with errors: The 
unavoidable errors in practical implementations should 
not erase the quantum information that is present in the 
computation. We have already seen that the teleporta- 
tion trick in the KLM scheme employs error correction to 
turn the non-deterministic gates into near-deterministic 
gates. However, this assumes that the photon sources, 
the mode matching of the optical circuits, and the pho- 
ton counting are all perfect. In the real world, this is far 
from true. 

What are the types of errors that can occur in the 
different stages of the quantum computation? We 
can group them according to the optical compo- 
nents: dete ction errors, source errors, and circuit errors 
(Takeuchi 2000a). In this section we will address these 
errors. In addition, we will address an assumption that 
has received little attention thus far: the need for quan- 
tum memòries. 



A. Photon detectors 

In linear quantum òptics, the main method for gain- 
ing information about the quantum states is via pho- 
ton detection. Theoretically we can make a distinc- 
tion between at least two types of detectors: ones that 
teli us exactly how many photons there are in an input 
state, and ones that give a binary output "nothing" or 
"many". There are many more possible distinctions be- 
tween detectors, but these two are the most important. 
The first type is called a number-resolving detector or a 
detector with single-photon resolution, while the second 
type is often called a bucket or vacuum detector. The orig- 



inal KLM proposal relies critically on the availability of 
number-resolving detectors. On the other hand, typical 
photon detectors in LOQC experiments are bucket de- 
tectors. In recent years there has been a great effort to 
bridge the gap between the requirements of LOQC and 
the available photon detectors, leading to the develop- 
ment of number-resolving detectors and LOQC proto- 
cols that rely less on high photon-number counting. In 
this section, we state the common errors that arise in re- 
alistic photon detection and review some of the progress 
in the development of number-resolving detectors. 

Real photon detectors of any kind give rise to two dif- 
ferent types of errors: 

1. The detector counts fewer photons than were ac- 
tually present in the input state. This is commonly 
known as photon loss; 

2. the detector counts more photons than were ac- 
tually present in the input state. These are com- 
monly known as dark counts. 

Observe that it is problemàtic to talk about the num- 
ber of photons "that were actually present" in the input 
state: When the input state is a superposition of different 
photon number states, the photon number in the state 
prior to detection is ill-defined. However, we can give 
a general meaning to the concepts of photon loss and 
dark counts for arbitrary input states when we define 
the loss or dark counts as a property of the detector (i.e., 
independent of the input state). The detector efficiency 
rj G [0, 1] can be defined operationally as the probability 
that a single photon input state will result in a detector 
count, while the dark counts can be defined as the prob- 
ability that a vacuum input state will result in a detector 
count. Subsequently, these definitions can be modified 
to take into account non-poissonian errors. 

Whereas perfect number-resolving detectors can be 
modelled using the projection operators onto the Fock 
states \n) {n\, realistic detectors give rise to Positive Op- 
erator Valued Measures, or POVMs. A Standard photon 
loss model is to have a perfect detector be preceded by 
a beam splitter with transmission coefficient n and re- 
flection coefficient 1 — rj. The reflected mode is consid- 
ered lost (mathematically, this mode is traced over), so 
only a fraction n of the input reaches the detector. In this 
model, every incoming photon has the same probability 
of being lost, leading to Poissonian statistics. The POVM 
for a number-re solving photon detecto r corresponding 
to this model is (Scull y and Lamb 19 69) 

00 / k \ 
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Using the same loss model , the POVM describing the 
effect of a bucket detector is ( Kok and Br aunstein 2 000b) 
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where 1 and denote a detector click and no detec- 
tor click, respectively. For an analysis including dark 
counts, see Lee et al. (2004a). 

Currently, the most common detectors in experiments 
on LOQC are Avalanche Photo-Diodes (APDs). When a 
photon hits the active semi-conductor region of an APD, 
it will induce the emission of an electron into the con- 
ductance band. This electron is subsequently acceler- 
ated in an elèctric potential, causing an avalanche of sec- 
ondary electrons. The resulting current telis us that a 
photon was detected. The avalanche must be stopped 
by reversing the potential, which leads to a dead time 
of a few nanoseconds in the detector. Any subsequent 
photon in the input mode can therefore not be detected, 
and this means that we have a bucket detector. A typical 
(unfiltered) detector efficiency for such a detector is 85% 
at a wavelength of 660 nm. Dark counts can be made as 
low as 6 ■ 10 3 Hz at room temperature and around 25 Hz 
at cryogenic temperatures. 

Several attempts have been made to create a number 
resolving detector using only bucket detectors and 
linear òptics, but no amount of linear òptics and bucket 
detection can lead to perfect, albeit inefficient, single- 
photon resolution (Kok2003). On the other hand, we 
can create approximate number-resolving detectors 
using only bucket detectors via detector cascading. In 
this setup, the incoming optical mode is distributed 
equally over N output modes, followed by bucket 
detection. When the number of modes in the cascade 
is large compared to the average photon number in 
the input state, and the detector efficiencies of the 
bucket detectors are relatively high, then good fidelities 
for the photon number m e asurement ca n be obtained 
iKok and Braunstein 2001; Rohde 2005). Detector 
cascading in the time-domain using increasingl y long 
fibre delavs is calle d tim e multiplexin g iFitch et al. 2003; 
lAch illes et a l. 2003t iBanaszek and Walmsley" 2003 ) . 
However, the fibre length (and hence the detection time) 
must increase exponentially for this technique to work. 
An alternative way to create number-resolving detectors 
is to use photon-number as sisted homodvne detection 
<Nemoto and Braunstein 2002t iBranczyket al. 2003). 
When an (imperfect) quantum copier is available, extra 
information can be extracted from the qubits (Deuar 
and Munro, 2000a, 2000b). 

Fully-fledged number-resolving photon detectors are 
also being develo ped, such as the Visible Light Photon 
Counter (VLPC) iTakeuchi et al. 19991: iKim et al. 1999T) . 
An excellent recent introduction to this technology is 
given by Waks et al. (2003). The VLPCs operate at a 
temperature of a few Kelvin in order to minimise dark 
counts. They consist of an active area that is divided 
into many separate active regions. When a photon trig- 
gers such a region, it is detected while leaving the other 
regions fully operational. Once a region has detected a 



photon, it experiences a dead time in which no photon 
detection can take place. Múltiple photon detections in 
different regions then generate a current that is propor- 
tional to the number of photons. The VLPC is thus ef- 
fectively a large detector cascade (N ~ 10 4 ) with high 
detection efficiency (~ 88% at 694 nm). The dark count 
rate of 2 ■ 10 4 Hz is about an order of magnitude higher 
than the dark count rate for off-the-shelf APDs. 

An alternative technique uses a superconducting 
transition-edge sensor that acts as a calorimeter. It mea- 
sures the rise in temperature of an absorber, which 
is quickly heated by i ncoming photons in th e visible 
light and near infra-red (Rosenberg et al. 2005). This de- 
vice operates at temperatures well below 100 mK, and 
has a measured detection efficiency greater than 88%. 
The dark counts are negligible, but the repetition rate 
is rather slow (of order 10 kHz) due to the cooling 
mechanism after a photon has been detected. In addi- 
tion to these experimental schemes, there are theoreti- 
cal proposals for numb er-resolving d etectors involving 
atòmic vapours flames and K wiat 2002), electromagnet- 
ically induced transparency (Imamoélu 2002), and reso- 
nant nonlinear òptics iTohnsson and Fleischhauer 2003). 

Finally, we briefly mention quantum non-demolition 
(QND) measurements. In the photon detectors that we 
described so far, the state of the electromagnètic field 
is invariably destroyed by the detector. However, in a 
QND measurement there is a freely propagating field 
mode after the measurement. In particular, the out- 
come of the QND measurement faithfully represents the 
state of the field after detection I Gran gier et al. 1998). 
Several schemes for single-photon QND measure- 
ments have been proposed, ei ther with l inear òp- 
tics llHowell and Yeazell 2000al iKok et al. 2 002 ) . op- 
tical quantum r elavs iTacobs et al. 20021), or other 
implementation s fljrung_et^L_1990; B rune et al. 19921 
iRoch et al. 19971 iMunro et al. 20051) . The experimental 
demonstration of a single-photon QND was reported by 
Nogués et al. (1999) using a cavity QED system, and 
a linear-optical QND measurement was performed by 
Pryde et al. (2004). However, this last experiment has 
led to a controversy about the nature of the fidelity mea- 
sure that was used (see Kok and Munro, 2005, and Pryde 
et al. 2005). 

So far, we have considered only photon-number de- 
tection. However, in many implementations of LOQC 
the qubit is encoded in a single polarised photon. A 
qubit detector must therefore extract the polarization of 
the photon, which may have had unwanted interactions 
with the environment. A change in the polarization of 
the photon will then induce an error in the computa- 
tional circuit. 

One mechanism that leads to errors in the polarization 
is inherent in any photon detector, and deserves a special 
mention here. In the Coulomb gauge, the polarization is 
perpendicular to the direction of propagation, and the 
plane of detection must therefore be perpendicular to 
the Poynting vector k. A complication arises when we 
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consider beams that are not perfectly collimated. We can 
write the fc-vector of the beam as 

k{9, <p) = (sin 9 cos ep, sin 9 sin ep, cos 9) . (55) 

A realistic, reasonably well-collimated beam will have a 
narrow distribution of 9 and <p around 9q and 4>q. If we 
model the active area of a detector as a flat surface per- 
pendicular to k(9o,4>o), some modes in the beam will 
hit the detector at an angle. Fixing the gauge of the field 
in the detection plane then causes a mixing of left- and 
right-handed polarization. This introduces a detection 
error that is fundamental, since the uncertainty principle 
prevents the trans verse momentum in a beam from be- 
ing exactly zero ÍPeres and Terno 20 02). At first sight 
this effect might seem negligible, but later we will see 
that concatenation of error correcting codes will amplify 
small errors. It is therefore important to identify all pos- 
sible sources of errors. 



B. Photon sources 

The LOQC protocols described in this review all make 
critical use of perfect single-photon sources. In this sec- 
tion we wish to make more precise what is meant by a 
single-photon source. We have thus far considered in- 
terferometric properties of monochromatic plane waves 
with exactly one field excitation. Such states, while a 
useful heuristic, are not physical. Our first objective is 
to give a general description of a single-photon state fol- 
lowed by a description of current experimental realisa- 
tions. 

The notion of a single photon conjures up an image of 
a single particle-like object localised in space and time. 
However it was conclusively demonstrated long ago by 
Newton and Wigner (1949), and also Wightman (1962), 
that a single photon cannot be localised in the same 
sense that a single massive particle can be localised. 
Here we are only concerned with temporal localisation, 
which is ultimately due to the fact that the energy spec- 
trum of the field is bounded from below. In this section 
we take a simpler operational view. A photon refers to 
a single detection event in a counting time window T. 
A single photon source leads to a periòdic sequence of 
single detection events with one and only one, photon 
detected in each counting window. Further refinement 
of this definition, via the output counting statistics of 
interferometers, is needed to specify the kind of single- 
photon sources necessary for LOQC. 

Consider a one-dimensional cavity of length L. The 
allowed wave vectors for plane wave modes form a de- 
numerable set given by k n = nn/L, with corresponding 
freqüències cv n = ck n . If we measure time in units of 
nL/c, the allowed freqüències may simply be denoted 
by an integer cv n — n 6 N. Similarly if we measure 
length in units of n/L, the allowed wave vectors are 
also integers. We are primarily interested in multi mode 



fields with an optical carrier frequeney, ü> 1. We de- 
fine the positive-frequeney field component as, 



à(t) 



E à " e ~ 

n=l 



(56) 



The bosonic annihilation and creation operators are 
given by Eq. From this point on we assume the de- 
tector is located at x = and thus evaluate all fields 
at the spatial origin. Following the Standard theory of 
photo-detection, the probability per unit time for detect- 
ing a single photon is given by 



where 



Pl (f) = Tjn(f), 



n(t) = (at(f)a(t)), 



(57) 
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and the parameter rj characterises the detector. 
A single-photon state may be defined as 

00 

|i;/> = E fmàl\G), 



(59) 



where |0) = Ylm \0)m is the multi-mode global vacuum 
state, and we require that the single-photon amplitude 
f m satisfies 
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The counting probability is then determined by 

2 



n(t) 



k=l 



-ikt 



(61) 



This function is clearly periòdic with a period In. As the 
spectrum is bounded from below by n = 1, it is not pos- 
sible to choose the amplitudes f n so that the functions 
n(t) have arbitrarily narrow support on í 6 [0, 2tï) . 
As an example we take 



iN 



< 62 ) 

where we have introduced a cut-off frequeney, N, mak- 
ing infinite sums finite, and < ]i < 0.5. For N»l the 
normalisation is very close to unity, so we will drop it in 
the following. The dominant frequeney in this distribu- 
tion is íl = fj.N, which we call the carrier frequeney. In 
this case 
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This function is shown in Fig.|33|for various vàlues of ]i. 
The probability per unit time is thus a periòdic function 
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FIG. 33 The function n{t) in arbitrary units in the domain 
— H<t<n for different vàlues of \j. and N = 100. (a) 
M = 0.001; (a) ii = 0.001; (b) ^ = 0.01; (c) li = 0.05; (d) 
ll = 0.49. 



of time, with period 2n and pulse width determined by 
fi when N is fixed. If we fix the carrier frequency Cl 
u V and let N become large we must let /i become small. 
In the limit N — »• oo, \i — > with D fixed we obtain a 
Poisson distribution for the single photon amplitude. 
A second example is the Lorentzian, 
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In the limit N 
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While a field for which exactly one photon is counted 
in one counting interval, and zero in all others, is no 
doubt possible, it does not correspond to a more phys- 
ical situation in which a source is periodically producing 
pulses with exactly one photons per pulse. To define 
such a field state we now introduce time-bin opera tors. 
For simplicity we assume that only field modes n < N 
are excited and all others are in the vacuum state. It 
would be more physical to assume only field modes are 
excited in some band, Cl — B < n < Cl + B. Here cu 
is the carrier frequency and 2B is the band width. How- 
ever, this adds very little to the discussion. 

Define the operators 
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where t = 2n/N. This can be inverted to give 
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The temporal evolution of the positive frequency com- 
ponents of the field modes then f ollows from Eq. Il56> 
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The time-bin expansion functions g^(t) are a function of 
IJ.T — t alone and thus are simple translations of the func- 
tions at t = 0. The form of Eq. <68t is a special case of a 
more sophisticated way to define time-bin modes. If we 
were to regard à{t) as a classical signal, then the decom- 
position in Eq. (68) could be generalised as a wavelet 
transform where the integer u labels the translation Ín- 
dex for the wavelet functions. In that case the functions 
gn(t) could be made rather less singular. In an experi- 
mental context, however, the form of the functions gn(t) 
depends upon the details of the generation process. 

The linear relationship between the plane wave 
modes a m and the time bin modes b y is realised by a uni- 
tary transformation that does not change particle num- 
ber, so the vacuum state for the time-bin modes is the 
same as the vacuum state for the global plane wave 
modes. We can then define a one-photon time-bin state 
as 



|1\ = ^|0). 
The mean photon number for this state is, 

«(í) = l^(0l 2 - 



(70) 



(71) 



This function is periòdic on í 6 [0, 2zr) and corresponds 
to a pulse localised in time at í = jUT. Thus the integer 
li labels the temporal coordinate of the single-photon 
pulse. 

We are now in a position to define an N-photon state 
with one photon per pulse. In addition to the mean pho- 
ton number, n (í ) we can now compute two-time correla- 
tion functions such as the second order correlation func- 
tion, G( 2 )(t) definedby 



G( 2 )(T) = (rf(t)tf(t + T)à(jt + T)à(t)). 
The simplest example for N = 2 is 

|l M /lv)=W|0) u^l. 
The corresponding mean photon number is 

»(0 = M')I 2 + Iffv(í)l 2 , 
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as would be expected. The two-time correlation func- 
tion is, 

G (2) (T) = |^(f)^(í + T)+^(f)^(f + r)| 2 . (75) 
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FIG. 34 The G^ 2 '(t) for the InAs quantum dot single-photon 
source of Santori et al. (2002b). Note that the variable T in the 
text is here replaced with t. Reprinted with permission from 
Nature Publishing Group. 



Clearly this has a zero at T = reflecting the fact that 
the probability to detect a single photon immediately af- 
ter a single photon detection is zero, as the two pulses 
are separated in time by |/i — v\, This is known as anti- 
bunching and is the first essential diagnòstic for a se- 
quence of single photon pulses with one and only one 
photon per pulse. When T = \fi — t|t, however, there is 
a peak in the two-time correlation f unction as expected. 
In Fig.[33]we have reproduced the experimental results 
for the G( 2 )(T) from Santori et al. (2002b). 

We now revisit the Hong- Ou-Mandel interferome- 
ter introduced in section IÏI.AI with single photon input 
states. This example has been considered by Rohde 
and Ralph (2005). We label the two sets of modes by 
the Latin symbols a, b so, for example, the positive fre- 
quency parts of each field are simply a(t), b(t ). The cou- 
pling between the modes is described by a beam splitter 
matrix connecting the input and output plane waves 
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where < v < 1 . The probability per unit time to find a 
coincidence detection of a single photon at each output 
beam is proportional to 



c = (at(t)bt(f)b(í)s(0>. 



(78) 



The over-line represents a time average over a detector 
response time that is long compared to the period of the 
field carrier freqüències. In this example, we only need 
consider the case of one photon in each of the two dis- 
tinguished modes, so we take the input state to be 
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where a n and /3 n refer to the excitation probability am- 
plitudes for modes a n and b n , respectively. This state 
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FIG. 35 The Hong-Ou-Mandel effect for one of the InAs 
quantum dot single-photon source of Santori et al. (2002b). 
Reprinted with permission from Nature Publishing Group. 



is transformed by the unitary transformation Li to give 
\M>)out = Lí(|l)fl <à In the case of a 50:50 beam split- 
ter, for which v = 0.5, this is given as (Lí|0) = |0)) 
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Note that the second and third terms in this sum have 
no photons in modes b and a, respectively. We then have 
that 
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If the excitation probability amplitudes at each fre- 
quency are identical, tx n = j3„ this quantity is zero. In 
other words, only if the two-single photon wave packets 
are identical do we see a complete cancellation of the co- 
incidence probability. This is the second essential diag- 
nòstic for a single-photon source. Of course in practice, 
complete cancellation is unlikely. The extent to which 
the coincidence rate approaches zero is a measure of the 
quality of a single-photon source as far as LOQC is con- 
cerned. Whether or not this is the case depends on the 
nature of the single photon sources. In Fig.|321we have 
reproduced the experimental results for the Hong-Ou- 
Mandel effect, shown with one of the InAs quantum dot 
single-photon sources of Santori et al. (2002b). 

Broadly speaking, there are currently two main 
schemes used to realise single photon sources: (I) con- 
ditional spontaneous parametric down conversion, and 
(II) cavity-QED Raman schemes. As discussed by Rohde 
and Ralph (2005), type (I) corresponds to a Gaussian dis- 
tribution of a function of n and thus is the contin- 
uum analogue of the binomial state defined in Eq. <62t . 
The second scheme, type (II), leads to a temporal pulse 
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structure that is the convolution of the excitation pulse 
shape and the Lorentzian line shape of a cavity. If the 
cavity decay time is the longest time in the dynamics, 
the distribution oc n takes the Lorentzian form given in 
Eq. J64t . An early single-photon source based on an op- 
tical emitter in a micro-cavity was proposed and demon- 
strated by De Martini et al. (1996). 

Cavity-based single-photon sources are very compli- 
cated experiments in their own right, and instead, most 
single-photon sources used in LOQC experiments are 
based on Parametric Down-Conversion (PDC). In PDC 
a short-wavelength pump làser generates photon pairs 
of longer wavelength in a birefringent crystal. PDC can 
yield extremely high fidelities (F > 0.99) because the 
data is usually obtained via post-selection: we take only 
those events into account that yield the right number of 
detector coincidents. In addition, PDC facilitates good 
mode matching due to energy and momentum conser- 
vation in the down-conversion process. The output of a 
non-collinear type-I PDC can be written as 

i oo 

|Vpdc> = V 1 - l A l 2 52 À "\n,n), (81) 
n=0 

where \n) is the «-photon Fock state, and A is a measure 
for the amount of down-conversion. The probability for 
creating n photon pairs is p(n) = (1 — |A| 2 )|/\| 2n , which 
exhibits pair bunching. When A is small, we can make a 
probabilistic single-photon gun by detecting one of the 
two modes. However, if we use only bucket detectors 
without single-photon resolution, then increasing A will 
also increase the amplitudes for a two-photon pair and 
ultimately high-photon pairs to the output state. Conse- 
quently the single-photon source will deteriorate badly 
A detailed study of the mode structure of the condi- 
tional photon pulse has been undertaken by Grice et al. 
(2001). 

Another consideration regarding parametric down- 
conversion is that the photons in a pair are typically 
highly entangled in frequency and momentum. When 
we use a bucket detector that is sensitive over a broad 
frequency range to herald a single photon in the freely 
propagating mode, the lack of frequency information 
in the detector read-out will cause the single-photon 
state to be mixed. In principle, this can be remedied 
by embedding the down-converting material in a micro- 
cavitv such that o nly certain freqüències are allowed 
(Ray mer et al. 2 005). The source will then generate pho- 
ton pairs with freqüències that match the cavity and a 
narrow-band bucket detector can herald a pure single- 
photon state with a small frequency line width. 

Alternatively, we can use the following method 
of making single-p hoton sources jPittman et al. 2002c: 
Mig dalletal. 20021) : Consider an array of PDCs with 
one output mode incident on a photon detector, and the 
other entering the quantum circuit. We fire all PDCs si- 
multaneously. Furthermore, all PDC have small A, but 
if there are approximately |A| -2 of them we still create 
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FIG. 36 The Raman process in a three-level atom. A clas- 
sical pump field drives the transition i 2 Si/ 2 ~ * 4 2 F 1 / 2 
resonantly, thus generating a photon in the cavity mode. The 
level 4 2 P 1 y 2 is adiabatically eliminated and hence never popu- 
lated. 



a single photon on average. Given that in current PDC 
configurations \A\ 2 ~ 10~ 4 , this is quite an inefficient 
process. Nevertheless, since it contributes a fixed over- 
head per single photon to the computational resources, 
this technique is strictly speaking scalable. For a de- 
tailed description of parametric down-conversion as a 
photon source see U'Ren et al. (2003). 

To illustrate the experimental constraints on the gen- 
eration of single-photon states, we now review an ex- 
ample of a cavity-QED Raman scheme implemented by 
Keller et al. (2004). Photon anti-bunching from reso- 
nance fluorescence was demonstrated long ago. If an 
atom decays spontaneously from an excited to a ground 
state, a single photon is emitted and a second photon 
cannot be emitted until the atom is re-excited. Unfor- 
tunately the photon is emitted into a dipole radiation 
pattern over a complete sòlid angle. Clearly we need to 
engineer the electromagnètic environment with mirrors, 
dielectrics, etc, to ensure a preferred mode for emission. 
However as pointed out by Kiraz et al. (2004), this comes 
at a price. For example, a carefully engineered cavity 
around a single dipole emitter can change the free field 
spectral density around the emitter such that a photon 
is indeed emitted in a preferred direction with an in- 
creased rate compared to free space emission. 

However, single-photon sources based on sponta- 
neous emission are necessarily compromised by the ran- 
dom nature of spontaneous emission. As demonstrated 
by Rohde, Ralph, and Nielsen (2005) , single-photon 
sources that create Gaussian wave packets are much 
more robust to mode mismatching than sources that 
create Lorentzian wave packets. Spontaneous emission 
processes fall in this last category. Clearly, we prefer a 
stimulated emission process yielding a Gaussian wave 
packet. To this end, a number of schemes based on stim- 
ulated Ra man emission into a cavity mode h ave been 
proposed jHennrich et al. 2001 iMaurer et al. 20041) . As 
an example, we discuss the experiment by Keller et al. 
(2004) in some detail. 

Consider the three-level atòmic system in Fig. [36] 
The ground state is coupled to the excited state via a 
two-photon Raman process mediated by a well-detuned 
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third level. In the experiment by Keller et al. (2004), a 
calcium ion 40 Ca + was trapped in a cavity via an RF 
ion trap. The cavity field is nearly resonant with the 
4 2 P]y 2 - ► 3 2 D 3 / 2 transition. Initially there is no photon 
in the cavity. An external làser is directed onto the ion 
and is nearly resonant with the 4 2 S}/2 ~~ y ^ 2 Pi/2 tran- 
sition. When this làser is switched on, the atom can be 
excited to the 3 2 D 3 / 2 level by absorbing one pump pho- 
ton and emitting one photon in to the cavity. Since this 
is a stimulated Raman process, the time of emission of 
the photon into the cavity is completely controlled by 
the temporal structure of the pump pulse. The photon 
in the cavity then decays through the end mirror, again 
as a Poisson process, at a rate given by the cavity decay 
rate. This can be made very fast. 

In principle one can now calculate the probability per 
unit time to detect a single photon emitted from the cav- 
ity. If we assume every photon emitted is detected, this 
probability is simply pi(í) = k(o> (t)à(t)) where k is the 
cavity decay rate and à, are the annihilation and cre- 
ation operators for the intra-cavity field and 



à\t)à{t)) =tr[p(f)í?H 
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where p(t) is the total density operator for ion-plus- 
cavity-field system. This may be obtained by solving 
a master equation describing the interaction of the elec- 
trònic states of the ion and the two fields, one of which 
is the time-dependent pump. Of course, for a gen- 
eral time-dependent pump pulse-shape this can only be 
done numerically. Some typical examples are quoted 
by Keller et al. Indeed by carefully controlling the 
pump pulse shape considerable control over the tem- 
poral structure of the single-photon detection probabil- 
ity may be achieved. In the experiment the length of 
the pump pulse was controlled to optimise the single- 
photon output rate. The efficiency of emission was 
found to be about 8%, that is to say, 92% of the pump 
pulses did not lead to a single-photon detection event. 
This was in accordance with the theoretical simulations. 
These photons are probably lost through the sides of the 
cavity. It is important to note that this kind of loss does 
not affect the temporal mode structure of the emitted 
(and detected) photons. 

In a similar way we can compute the second-order 
correlation function via 
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where e CT is a formal specification of the solution to the 
master equation for a time T after the "initial" condi- 
tional state ap{t)a} . Once again, due to the non station- 
ary nature of the problem, this must be computed nu- 
merically. However, if the pump pulse duration is very 
short compared to the cavity decay time, and the cavity 
decay time is the fastest decay constant in the system, 
the probability amplitude to excite a single photon in a 
cavity at frequency cv is very close to Lorentzian. The 



experiment revealed a clear suppression of the peak at 
T = in the normalised correlation function g^ 2 '(T), 
thus passing the first test of a good single photon source. 
Unfortunately, a Hong-Ou-Mandel interference experi- 
ment was not reported. 

For a practical linear-optical quantum computer, how- 
ever, we need good microscopic single-photon sources 
that can be produced in large numbers. A recent re- 
view on this tòpic by Lounis and Orrit (2005) identifies 
six types of microscopic sources: i) Àtoms and ions in 
the gaseous phase 4 ; ii) Orgànic molècules at low tem- 
perature and room temperature 5 ; iii) Chromophoric sys- 
tems 6 ; iv) Colour centres in diamond, such as nitrogen- 
vacancy 7 or nickel-nitrogen 8 ; v) Semiconductor nano- 
crystals 9 ; and vi) self-assembled quantum dots and 
other hetero-structures such as micro-pillars and micro- 
mesa 10 , quantum dots 11 , and electrically driven dots 12 . 
The typical physical mechanisms that reduce the indis- 
tinguishability of the single-photon sources are dephas- 
ing of the optical transition, spectral diffusion, and inco- 
herent pumping. An earlier review on this tòpic is given 
by Greulich and Thiel (2001). The subject of single- 
photon sources using quantum dots was reviewed by 
Santori et al. (2004). 

When single-photon sources are less than ideal, lin- 
ear òptics might be employed in order to improve the 
output state. For example, if the source succeeds with 
probability p, then the output of the source might be 
p = p|l) (1| + (1 — p)|0) (0|, where we assumed that the 
failure output results in a vacuum state. Using múlti- 
ple copies of p, linear òptics, and ideal photon detec- 
tion, one may i ncrease the probability up to p = 1/2, 
but not higher I Be rry et al. 20051) . A general discussion 
on improving single-photon sources with linear optical 
post-processing is given by Berry et al. (2004). 

Single-photon sources must not only create clean 
single-photon states, in the sense described above, but 
all sources must also generate identical states in or- 
der to achieve good visibility in a Hong-Ou-Mandel 
test. Typical experiments demonstrating single-photon 
sources create subsequent single-photon states in the 
same source and employ a delay line to interfere the two 
photons. This way, two-photon quantum interference 
effects are demonstrated without having to rely on iden- 
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tical sources JSantori et al. 2002bT) . De Riedmatten et 
al. demonstrated quantum interference by using iden- 
tical pulse shapes triggering different photon sources 
ide Riedmatte n et al. 20031) . In applications other than 
LOQC, such as cryptography, the requirement of indis- 
tinguishable sources may be relaxed. This leads to the 
concept o f the suitability of a s ource for a particular ap- 
plication (Hockne v et al. 20031) . 

A variation on single-photon sources is the entangled- 
photon source. We define an ideal entangled-photon 
source as a source that creates a two-photon polar- 
isation Bell state. This is an important resource in 
both the Browne-Rudolph and the Gilchrist-Hayes- 
Ralph protocol. It is known that these states can- 
not be created deterministically from single-photon 
sources, linear òptics and d estructive photon detection 
dKok and B raunstein 2000a). Nevertheless, such states 
are very desirable, since they would dramatically re- 
duce the cost of linear-optical quantum computing. 
The same error models for single-photon sources ap- 
ply to entangled-photon sources. Again, a great va- 
riety of proposals for entangled-photon sources exist 
in the literature, using quantum dots (Benson et al. 
2000; Stace et al. 2003) or parametric down-conversion 
jSliwa and Ban aszek 2003). Two-photon states with- 
out entanglement have been created experimentally 
by Moreau et al. (2001), and Santori et al. (2002a) . 
as have entangled photon pairs jYamamoto et al. 20031: 
iKuzmichet al. 20031) . 



C. Circuit errors and quantum memòries 

In addition to detector errors, and errors in the single- 
photon sources, there is a possibility that the optical cir- 
cuits themselves acquire errors. Probably the most im- 
portant circuit error is mode mismatching. It occurs when 
non-identical wave packets are used in an interferomet- 
ric setup [e.g., the coefficients a n and fi n in Eq. Í8*Ul are 
not identical]. There is a plethora of reasons why the co- 
efficients <x n and j3 n might not be equal. For example, the 
optical components might not do exactly what they are 
supposed to do. More precisely, the interaction Hamil- 
tonian of the components will differ from its specifica- 
tions. One manifesta tion of this is that there is a finite ac- 
curacy in the parameters in the interaction Hamiltonian 
of any optical component, leading to changes in phases, 
beam splitter transmission coefficients, and polarisation 
rota tion angles. In addition, unwanted birefringence 
in the dielectric media can cause photo-emission and 
squeezing. Inaccurate Hamiltonian parameters gener- 
ally reduce the level of mode matching, leading, for ex- 
ample, to a reduced Hong-Ou-Mandel effect and hence 
inaccurate CZ gates. Indeed, mode matching is likely 
to be the main circuit error. Most of this effect is due 
to non-identical photon sources, which we discussed in 
the previous section. The effect of frequency and tempo- 
ral mode mismatching was studied by Rohde and Ralph 



(2005), and by Rohde, Ralph, and Nielsen (2005). 

A second error mechanism is that typically compo- 
nents such as beam splitters, half- and quarter-wave 
plates, etc. are made of dielectric media that have a 
(small) absorption amplitude. Scheel (2005) showed 
that there is a lower bound on the absorption ampli- 
tude in physical beam splitters. In addition, imperfect 
impedance matching of the boundaries will scatter pho- 
tons back to the source. This amounts to photon loss 
in the optical circuit. In large circuits, these losses can 
become substantial. 

A third error mechanism is due to classical errors in 
the feed-forward process. This process consists of the 
read-out of a photon detector, classical post-processing, 
and conditional switching of the optical circuit. The de- 
tection errors have been discussed in section IIV.AI and 
classical computing is virtually error-free due to robust 
classical error correctio n. Optical switches, however, are 
still quite lossy llThew et al. 2003) . In addition, when 
high-voltage Pockels celis are used, the repetition rate 
is slow (on the order of 10 kHz). This may become too 
slow, as photons need to be stored in a quantum mem- 
ory (e.g., a delay loop), which itself may be lossy and 
needs feed-forward processing. Feed-forward control 
for LOQC was demonstrated by Pittman et al. (2002a) 
and Giacomini et al. (2002). 

An important component of linear optical quantum 
computing that we have ignored so far is the quantum 
memory. When the probability of a successful (tele- 
ported) gate or addition to a cluster state becomes small, 
the photons that are part of the circuit must be stored for 
a considerable time while the off-line preparation of en- 
tangled photons is taking place. The use of mere fibre 
loops then becomes problemàtic, as these induce pho- 
ton losses (0.17 dBkm -1 in a Standard telecom fibre at 
1550 nm). For example, to store a photon for 100 /is in 
a fibre has a loss probability of p « 0.54. At present, all 
linear optical quantum computer proposals need some 
kind of quantum memory. This may be in the form of 
delay lines with error correction, atòmic vapours, solid- 
state implementations, etc. 

In general, the effect of a quantum memory error boils 
down to the inequality of the input state p- m and the 
(time-translated) output state p ou t- A good figure of 
mèrit is the fidelity Fq m : 



n 2 



(84) 



The absence of a photon in the output state is an obvious 
failure mechanism, but other ways the memory can fail 
include qubit decoherence and mode mismatching of 
the input/ output modes. In this sense, the design spec- 
ifications of a solid-state based quantum memory are 
more stringent than those for solid-state single-photon 
sources: Not only does it need to produce a single pho- 
ton with very high fidelity, it also needs the ability to 
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couple a photon into the device with very high probabil- 
ity. Note that we do not have to couple a photonic qubit 
into a quantum memory: We can use two photon mem- 
òries to store one qubit, provided the memory does not 
retain information about whether a photon was stored 
or not. 

A proof-of-principle for a free-space delay line was 
given by Pittman and Franson (2002), and quantum 
memory delay lines using quantum error correction 
and QND measurements were proposed by Gingrich 
et al. (2003), and Ralph et al. (2005). A storage time 
of 125 fis for entangled photons in a telecom fibre was 
reported by Li et al. (2005), with subsequent fringe 
visibilities of 82%. Using the magnètic sublevels of 
the ground state of an atòmic ensemble, Julsgaard et 
al. (2004) stored a weak coherent light pulse for up 
to 4 ms with a fidelity of 70%. The classical limit is 
50%, showing that a true quantum memory was con- 
structed. Other proposats in clude dark-state polaritons 
I Fleischhauer and Lukin 2002), and single-photon cav- 
ity QED I Maïtr e et al. 19971) . 



V. GENERAL ERROR CORRECTION 

To achieve quantum computing despite inevitable phys- 
ical errors in the quantum computer, we have to employ 
Error Correction (EC). Typically, an error-correction pro- 
tocol consists of a circuit that can correct for one or more 
types of error. However, these circuits will in turn in- 
troduce errors. For an EC protocol to be useful, the er- 
ror in the circuit after the EC protocol must be smaller 
than the error before the EC protocol. Repeated nested 
application of the EC protocol (so-called concatenation) 
can then reduce the errors to arbitrarily small levels. In 
doing so, we must take care not to sacrifice the scaling 
behaviour of the quantum computer. This is captured 
in the notion of fault tolerance. The magnitude of the 
errors for which fault tolerance breaks down is called 
the fault-tolerant threshold. For more details, see Nielsen 
and Chuang (2000). 

General fault-tolerant thresholds for quantum com- 
puting have been derived by Steane (2003) and Knill 
(2005), and here we address LOQC specific error correc- 
tion and fault-tolerant thresholds. We have seen that the 
KLM scheme employs a certain level of error correction 
in order to turn high-probability teleported gates into 
near-deterministic gates, even though all-optical com- 
ponents are ideal. In this section, we discuss how an 
LOQC architecture can be developed with robustness 
against component errors. 

Different error models will typically lead to different 
levels of robustness. For example, in the cluster-state 
approach of Browne and Rudolph, we can relax the con- 
dition of perfect photon counting given ideal photon 
sources. The type-II fusion opera tion described in sec- 
tion lïïTDI must give a coincidence count in the two de- 
tectors. Any other detector signa ture heralds an error. 



So if the photon detectors are lossy, the rate of coin- 
cidence counts is reduced. Since the fusion operation 
is already probabilistic, a reduced success rate trans- 
lates into a larger overhead in the cluster-state genera- 
tion. However, if the photon sources are not ideal and 
if there is a substantial number of dark counts in the de- 
tectors, then we rapidly lose quantum information. This 
raises two important qüestions: (1) Given a certain er- 
ror model, what is the error correcting capability for a 
given LOQC architecture? (2) What is the realistic error 
model? This last question depends on the available pho- 
ton sources, detectors and memòries, as well as the ar- 
chitecture of the optical quantum computer. Currently, 
theoretical research in LÓQC is concentrating on these 
qüestions. 

The three main errors that need to be coded against 
are inefficient detectors, noisy photon sources, and un- 
faithful quantum memòries. There are other error mech- 
anisms as well (see section lïVV and these will become 
important in concatenated error correction. In order 
to find the fault-tolerant level for a given architecture, 
these other errors must be taken into account. In the 
next section, we discuss how photon loss can be cor- 
rected in both the cluster-state model and the circuit- 
based model. In section IV. Bl we discuss fault-tolerant 
quantum computing in the cluster-state model. 



A. Correcting for photon loss 

We first consider photon loss. Its effect on the original 
teleportation component in the KLM protocol was stud- 
ied by Glancy et al. (2002), who found that in the KLM 
scheme a gate teleportation fidelity better than 99% re- 
quires detectors with an efficiency rj > 0.999 987. Using 
the seven qubit CSS quantum code, the photon loss e in 
the KLM scheme is allowed to be as large as 1.78% < 
e < 11.5%, depen ding on th e construction of the entan- 
gling gates I Sil va et al. 2 005). Using the type-I and type- 
II fusion gates in creating entanglement, the photon loss 
can be much higher: In the Browne-Rudolph protocol, 
a low detection efficiency merely reduces the rate with 
which the cluster state is created, whereas in the circuit- 
based model a low detection efficiency requires a higher 
level of encoding. 

However, we not only need the ability to grow the 
cluster or the parity encoding efficiently we also need 
to do the single-qubit measurements. Since in LOQC the 
single-qubit measurements amount to photon detection, 
we have a problem: Failing to measure a photon is also a 
single-qubit failure. Therefore, every logical qubit must 
be constructed with múltiple photons, such that photon 
loss can be recovered from. In particular, this means that 
we can no longer straightforwardly remove redundant 
qubits in the cluster-state model if they are not properly 
encoded. In this section, we show how cluster states can 
be prot ected from photon lo ss by "planting trees" in the 
cluster ÍVarnava et al. 2005), and we will describe how 
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FIG. 37 Photon-loss tolerant cluster states. (a) We can measure 
the Pauli operator X on the shaded (lost) qubit by measuring 
all the adjacent qubits in the Z basis, (b) Planting a cluster tree 
using two adjacent X measurements in order to do a single- 
qubit measurement in the basis A. 

an extra layer of encoding protects the circuit model of 
Ralph, Hayes, and Gilchrist (2005) from detection ineffi- 
ciency, probabilistic sources, and memory loss. 

Varnava, Browne, and Rudolph (2005) introduced a 
code exploiting the property that a cluster state is an 
eigenstate of every stabiliser generator, and that the 
eigenvalue of each is known beforehand (we will as- 
sume that all eigenvalues are +1). This allows us to 
measure the value of a lost qubit as follows: Suppose we 
wish to measure a qubit in the computational basis, that 
is, we require a Z measurement. If that qubit is no longer 
present, we can choose S; = X/ Yljeníi) such that our 
lost qubit is in the neighbourhood n{i) of the z th qubit. If 
we successfully measure X, and all Z; except for the lost 
qubit, we can multiply the eigenvalues to find either +1 
or —1. Since the stabiliser generator has eigenvalue +1, 
this determines the Z eigenvalue, and therefore the Z 
eigenstate of our lost qubit. In figurel3"7h. we show how 
an X measurement can be perf ormed on a lost qubit by 
Z measurements on the adjacent qubits. 

In cluster-state quantum computing, we need the abil- 
ity to do single-qubit measurements in an arbitrary 
basis; A = cos (p X + sin (p Y. To this end, we use 
the cluster-state property that two adjacent X measure- 
ments remove the qubits from the cluster and transfer 
the bonds. This way, we can plant the qubit labelled A 
into the cluster (see Fig. 137b). Instead of doing the A 
measurement on the in-line qubit, we perf orm the mea- 
surement on a qubit in the third (horizontal) level. When 
this measurement succeeds, we have to break the bonds 
with all the other qubits in the tree. Therefore, we mea- 
sure all the remaining qubits in the third level as well as 
the qubits in the fourth level that are connected to the A 
qubit in the Z basis. 

Sometimes the photon detection that constitutes the 
qubit measurement A will f ail due to the detector ineffi- 
ciency. In that case, we can attempt the A measurement 
on a second qubit in the third level. Again, the remain- 
ing qubits and the fourth-level qubits connected to the A 



qubit must be measured in the Z basis. Whenever such 
a Z measurement fails (as is the case for the qubit that 
failed the A measurement), we need to do an indirect Z 
measurement according to the method outlined above: 
When a photonic qubit is lost, we need to choose a sta- 
biliser generator for which that photon was represented 
by a Z operator. The tree structure ensures that such 
an operator can always be found. We then measure all 
the photons in this stabiliser generator to establish the Z 
eigenvalue for the lost photon. In the case of additional 
photon loss, we repeat this process until we succeed. 

When the success probability of the measurement of a 
logical qubit is given by p, then the number of qubits in 
a tree n is given by 

n = polylog (jzrz^j ■ ( 85 ) 

Numerical simulations indi cate that a detector loss of 
up to 50% can be corrected dVarnava et al. 20051) . More- 
over, if more than 50% of the photons were allowed to 
be lost, then we can imagine that all the lost photons are 
collected by a third party who can perform a measure- 
ment complementary to A on the same qubit. Since this 
would violate various no-cloning bounds, such a strat- 
egy must be ruled out. Hence . a detection efficiency of 
50% is the absolute minimum (Barrett 2005). 

In the circuit-based model by Gilchrist, Hayes, and 
Ralph, the lowest level of encoding consists of a po- 
larised photon such that |0) = \H) and |1) = 
|V). The second level of encoding is the parity code 
||0) ("), |1)(")} of Eq. EU, which allows us to use the 
probabilistic fusion gates in a deterministic manner. The 
third level of encoding is a redundant encoding such that 
a logical qubit is encoded in a GHZ state of parity- 
encoded qubits (Ralp h et al. 20051) : 

|^) L = «|0)S' l) ...|0)í" ) + / 3|l)[ n) ...|l)J" ) . (86) 

To demonstrate that this code protects quantum infor- 
mation from photon loss, we show that heralded photon 
loss merely yields a recoverable error, and that we can 
perform a universal set of deterministic quantum gates 
on these logical qubits. 

First of all, we note that every pair of optical modes 
that constitutes the lowest level qubit encoding must 
contain exactly one photon, and no high number count- 
ing is required (contrary to the KLM scheme). This is 
also true for the Browne-Rudolph protocol. We there- 
fore assume that we have bucket detectors with a certain 
detection efficiency r\ and a negligible dark count rate. 
The type-I and type-II fusion gates are then no longer 
(1,1) and (2,1) strategies, respectively. The type-I fusion 
gate ceases to yield pure output states, while the type-II 
gate yields a pure output state only if a detector coinci- 
dence is found (we assume perfect sources). A failure 
not only removes the mode that was involved with the 
PBS, but we should also measure one mode in order to 
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purify the cluster. Hence, the type-II fusion gate with 
bucket detectors is a (2,2)-strategy, and the growth re- 
quirement is m > 2/p. 

Suppose we wish to measure the value of the logical 
qubit |i/>) l in the computational basis (as we discuss be- 
low, any other measurement can be performed by first 
applying a single-qubit rotation to |i/>}l)- Since the log- 
ical qubit is a GHZ state, it is sufficient to measure only 
one parity qubit, e.g., the first one. Physically, this mea- 
surement constitutes a counting of horizontally and ver- 
tically polarised photons: if the number of vertically 
polarised photons is even, then the value of the parity 

qubit is lO}^, and if it is odd, then its value is ll}^- In 
order to successfully establish the parity, we therefore 
need to detect all n photons. 

When we include photon loss in this measurement, 
there are three possible measurement outcomes for ev- 
ery optical mode: "horizontal", "vertical", or "detector 
failure". In the language of POVMs, this can be written 
as 



É(») = n\H)(H\; 
É( y ) = tj|V>(V|; 
É(°) = (l-n)(\H)(H\ + \V){V\ 
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These POVMs add up to unity in the subspace spanned 
by \H) and | V), as required. A particular measurement 
outcome on n modes can then be written as a string of 
n outcomes s = (si, . . . , s„), where every s,- G {H, V, 0}. 
The optical state after finding a particular measurement 
outcome s is then 
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When all photons are detected, the qubit is projected 
onto its logical value. However, when one or more 
qubits are lost it is no longer possible to establish the 
parity. Therefore, as soon as a photon is lost the next 
photon is measured in a diagonal basis, thus disentan- 
gling the parity qubit from the other parity qubits. A 
few lines of àlgebra shows that the remaining q — 1 par- 
ity qubits are in the state 

|^ = a|0>(" ) ...|0)S" ) + ^|l)(' l) ...|l>S' l) . (89) 

In other words, the encoding has become smaller but the 
quantum information has not been erased. We can there- 
fore retry the measurement of the qubit q times. 

Next, we have to show that we can perform determin- 
istic one- and two-qubit gates using this redundant en- 
coding. To this end, recali how deterministic gates were 
implemented in the parity encoding: A universal set of 

gates is {X { e p) , Z(P), zJfL CNOT^}. We added a super- 
script (p) to indicate that these gates act on the parity 
qubit. As we have seen, the gates Z%] 2 and CNOT(p) 
cannot be implemented deterministically, and have to 
be built using fusion gates. 



How can these gates be used to form a universal set 
on the redundantly encoded (logical) qubit? First, the 
single-qubit gate Z is still implemented deterministi- 
cally: Z = Z^P) = na z . Therefore, in order to ap- 
ply a Z gate, a cr z operation must be applied to all n 
photons in one and only one parity qubit. Secondly, the 
gate Z n j2 is diagonal in the computational basis, and 

can therefore be implemented using one Z^ 2 . Thirdly, 

the Xg gate on the redundantly encoded qubit is some- 
what problemàtic, since the gate transforms separable 
states of parity qubits into highly entangled GHZ states. 
However, if we apply( í? -l)CNOT(P) gates, we can de- 
code the qubit such that its state is (a|0)^ n) + j3|l)jp) <g> 

1 0) 2 ... 1 0) q . We can then apply the deterministic gate 

(p) 

Xg to the first parity qubit, and use another set of 
(í-l)CNOT(P) gates to re-encode the qubit. Therefore, 
the gate X e "costs" 2(q - 1) CNOT») gates. Finally, the 
CNOT gate on the redundantly encoded qubit can be 

implemented using q cnotW gates. 

Since every single-qubit operation can be constructed 
from Xg and Z^, we can perform arbitrary single-qubit 
measurements. We now have a universal set of gates 
on our logical qubit, together with computational-basis 
read out and an efficient encoding mechanism. Nu- 
merical simulations indicate that this method allows for 
combined det ector, source and memory efficiencies of 
77 > 55% iRalph et al. 20051) . 

Note that there seem to be conflicting requirements 
in this code: In order to execute successful fusion gates, 
we want n to be reasonably large. On the other hand, 
we want n to be as small as possible such that the prob- 
ability of measuring all n photons p = rf 1 is not too 
small. We assumed that every parity qubit is encoded 
with the same number of photons n, but this is not nec- 
essary. In principle, this method works when different 
parity qubits have different-sized encodings. However, 
some care should be taken to choose every n; as close to 
the optimal value as possible. 



B. General error correction in LOQC 

As we mentioned before, photon loss is not the only er- 
ror in LOQC, and creating large cluster trees or a sizable 
redundant encoding in the circuit model will actually 
amplify other errors, such as dephasing. A truly fault- 
tolerant quantum computer architecture must therefore 
be able to handle the actual physical noise that will be 
present. Given a certain noise model and error correct- 
ing codes, we can derive fault-tolerant thresholds: The 
errors must be smaller than the threshold value for con- 
catenated error correction to eliminate them all. Knill 
et al. (2000) considered a combination of photon loss 
and dephasing in the original KLM proposal and found 
that the accuracy threshold for the optical components 
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in that scheme was higher than 99%. 

Dawson, Haselgrove, and Nielsen (2006a,b) per- 
formed an extensive numerical study of fault-tolerant 
thresholds for linear optical cluster state quantum com- 
puting. The computational model they adopted is 
Nielsen's micro-cluster approach, described in section 
IIII.CI with type-I fusion gates instead of KLM-type CZ 
gates. The physical operations in this model are Bell- 
state preparation, single-photon gates and memòries, 
type-I fusion gates, and photon measurements. The 
computation proceeds in time steps, with exactly one 
opera ti on at each step. Furthermore, it is assumed that 
any two single-photon qubits in the computation can 
serve as the inputs of the fusion gate. In other words, 
we have a direct interaction between qubits. In addition, 
parallel operations are allowed to speed up the com- 
putation and minimise the use of quantum memòries. 
Finally, the classical computation needed to control the 
cluster state computing is taken to be sufficiently fast. 

The noise model adopted by Dawson et al. consists 
of the inherent probabilistic nature of the fusion gates, 
as well as photon loss and depolarisation at every time 
step in the computation. The photon loss is charac- 
terised by a uniform loss probability y, and the depolar- 
isation comes in two flavours: Single-qubit operations 
have a probability e/3 of undergoing a Pauli opera ti on 
X, Y, or Z. After the Bell-state preparation and before 
the fusion gate input, the two photons undergo a corre- 
lated depolarising noise: With probability (1 — e) noth- 
ing happens to the qubits, while with probability e/15 
any of the remaining 15 two-qubit Pauli operators are 
applied. This is a completely general model for the noise 
that can affect optical cluster state quantum computing, 
and the resulting fault-tolerance simulation gives an ac- 
curacy threshold region on y and e. Thresholds were ob- 
tained for both a seven-qubit CSS error correction code 
and a 23-qubit Golay error correction code. The study 
shows that scalable quantum computing with the 23- 
qubit code is possible for a maximum loss probability of 
y < 3 ■ and a maximum depolarising probability 
ofe<10" 4 . 

Even though this noise model accounts for general 
noise, and the fault-tolerant threshold puts a bound 
on its magnitude, it is clearly a simplification of the 
physical noise that is expected in cluster state LOQC. 
It is argued that the difference between correlated two- 
qubit noise and independent noise does not change 
the threshold much. Similarly, using one parameter 
to describe both photon absorption and detector effi- 
ciency wi ll not h ave a dramàtic effect on the thresh- 
old (Nielsen 20 06). The next milestone for establishing 
fault-tolerance thresholds is to adopt a noise model in 
which the parameters are measurable quantities, such 
as the visibility in a Hong-Ou-Mandel experiment and 
photon loss probabilities. 

When various parameters in a noise model differ sig- 
nificantly it might be beneficial to diversify the error 
correction codes. EC codes that correct specific errors 



such as photon loss or depolarisation may be smaller 
than genèric EC codes, and therefore introduce less 
noise. A round of special error correction might be used 
to reduce large errors, and subsequent genèric error cor- 
rection will further reduce the errors below the fault- 
tolerant threshold. 

In addition, certain types of errors or noise might be 
naturally suppressed by a suitable alteration in the ar- 
chitecture. For example, there is a way to create high- 
fidelity four-photon GHZ state s with lossy b ucket de- 
tectors and inefficient sources (Gilchrist 2005). Assume 
that the Bell-pair source creates a state of the form 
p s |0)(0| + (1 - p s )\W-)(W-\, where |MT) is the two- 
photon polarization singlet state. This is a reasonable 
error model when the source obeys selection rules that 
prevent single-photon components to contribute to the 
output state (c.f., Benson et al. 2000). In order to make 
a three-photon GHZ state using these sources we use 
a type-I fusion gate and post-select on a single detector 
click. The detector click indicates that at least one source 
created a photon pair. However, if only one photon pair 
was created, the output mode of the type-I fusion gate 
must necessarily empty. By taking the output modes 
of two type-I fusion gates in two separate three-photon 
GHZ creation attempts, and leading them into a type-II 
fusion gate, we can post-select on finding two detector 
clicks. As a result, high-fidelity four-photon GHZ states 
are produced. 

Several other specialised circuits have been proposed 
that either detect errors or correct them. For exam- 
ple, Ralph (2003) proposed a simple demonstration 
circuit that detects and corrects bit flip errors on a 
single qubit using the encoded qubit state a|0)|0) + 
/3|1)|1) and an ancilla qubit |0). However, since this 
is a probabilistic protocol, this circuit cannot naively 
be inserted in a quantum computing circuit. If we 
assume the availability of perfectly efficient detectors 
(not necessarily photon-number resolving), determin- 
istic polarisation-flip detec tion for d istributing entan- 
glement can be achieved (Kalamidas 2004). In a sim- 
ilar fashion, a single-qubit error correction circuit can 
be constructed with pola rising beam splitters, half-wave 
plates, and Pockels celis (K alamidas 20051) . Here, we as- 
sume that these passive optical elements do not induce 
additional noise. A full analysis would have to take this 
noise into account. 



VI. OUTLOOK: BEYOND LINEAR ÒPTICS 

We have seen in this review that it is possible to con- 
struct a quantum computer with linear òptics, single- 
photon sources, and photon detection alone. Knill, 
Laflamme, and Milburn (2001) overturned the conven- 
tional wisdom that a lack of direct photon-photon inter- 
actions prohibits scalability. Since KLM, several groups 
have proposed modifications to building a linear optical 
quantum computer with reduced resources and realistic 
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(noisy) components. 

The bàsic principies of LOQC have all been demon- 
strated experimentally, predominantly using parametric 
down-conversion (PDC) and bucket photon detection. 
Due to the small efficiency of PDC photon sources, how- 
ever, these techniques cannot be considered scalable in 
a practical sense. Currently there is a concerted effort to 
build the necessary single-photon sources, photon de- 
tectors, and quantum memòries for a scalable linear op- 
tical quantum computer. On the theoretical front, there 
is an ongoing effort to design more efficient architec- 
tures and effective error correction codes tailored to the 
noise model that is relevant to LOQC. 

Nevertheless, constructing the necessary components 
and using fault-tolerant encoding is hard, and several 
extensions to LOQC have been proposed. In this last 
section we sketch a few additions to the linear optical 
toolbox that can make quantum computing a little bit 
easier. 

First, we have seen in section II .Dl that a cross-Kerr 
nonlinearity can be used to induce a photon-photon in- 
teraction, and how two-qubit quantum gates can be con- 
structed using such a nonlinearity. Unf ortunately, natu- 
ral Kerr nonlinearities are extremely small, and this is 
not a practical method for creating optical gates. How- 
ever, recently it was suggested that a small nonlinear- 
ity might still be used for quantum computing. It was 
shown by Munro et al. (2005) how such nonlinearities 
can make a number-resolving QND detector, and Barrett 
et al. (2005) showed how a small cross-Kerr nonlinear- 
ity can be used to perform complete Bell measurements 
without destroying the photons. Subsequently it was 
realized by Nemoto and Munro (2004) that this tech- 
nique can also be used to create a deterministic CNOT 
gate on photonic qubits. Recent work in electromagnet- 
ically induced transparències by Lukin and Imamoglu 
(2000, 2001) suggests that the small-but-not-tiny nonlin- 
earities needed for this method are on the threshold of 
becoming practical. Alternatively, relatively large non- 
line arities can be obtain ed in photonic band-gap materi- 
als dFriedler et al. 20041) . 

Secondly if we have high-fidelity single-photon 
sources and memòries, it might become beneficial to en- 
gineer these systems such that they support coherent 
single-qubit operations. This way we can redefine our 
qubits as isolated static systems, and we have circum- 
vented the problem of qubit loss. When these matter 
qubits emit a qubit-dependent photon, they can in turn 
be entangled using techniques from linear optical quan- 
tum computing. It was shown by Barrett and Kok (2005) 
that such an architecture can support scalable quantum 
computing, even with current realistic components. In- 
dependently, Lim et al. (2005) showed how a similar 
setup can be used to implement deterministic two-qubit 
quantum gates. Recently, these two methods were com- 
bined in a fault tolera nt, near- deterministic quantum 
computer architecture lLim et al. 200 5a). 

Thirdly, Franson, Jacobs, and Pittman proposed the 



implementation of a two-qubit VSWAP gate using the 
quantum Zeno effect: Two optical fibres are fused and 
split again, such that the input modes overlap in a small 
section of the fibre. This acts as a beam splitter on the 
modes in the input and output fibres. At regular inter- 
vals inside the joint fibre we place àtoms with a two- 
photon transition. This transition acts as a two-photon 
measurement, while single-photon wave-packets prop- 
agate through the fibre undisturbed. Furthermore, the 
single-photon wave-packets maintain coherence. The 
effect of this repeated two-photon measurement is to 
suppress the Hong-Ou-Mandel effect via the quantum 
Zeno effect. In this way, two single-photon qubits in 
the input modes are transf ormed into two single-photon 
qubits in the output modes and undergo a -y/SWAP gate. 

Finally, an alterna tive approach to linear optical quan- 
tum computing involves encoding qub its in squeezed 
or coherent sta tes of light llGottesman et al. 2001; 
Ralph etal. 20031) . Linear elements take on a new ca- 
pability in these implementations. For example Bell 
measurem ents and fan-out gates be c ome det erministic 
elements Ivan Enk and Hirota 200l iTeonget al 2001). 
The downside is that it is difficult to produce the 
superposition states that are required as resources 
in such schemes, although considerable theoretical 
and experimental progress has be en made recently 
dLund et al. 20041: IWenger et al. 2004). If this problem is 
solved, considerable savings in resources could result 
from adopting such implementations. 

Whatever the ultimate architecture of quantum com- 
puters will be, there will always remain a task for (lin- 
ear) optical quantum information processing: In order 
to distribute quantum information over a network of 
quantum computers, the qubit of choice will most likely 
be optical. We therefore believe that the techniques re- 
viewed here are an important step towards full-scale 
distributed quantum computing — the Quantum Inter- 
net. 
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